Every CVE Search/ Get API key

CVE-2007-3798

Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote...

9.8 CriticalPublic exploitFix available

Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

70.4%Up 22.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 9.8

Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.

Record
CVE-2007-3798
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-252
Updated
2026-11-02
CVE List 9.8

Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.

Record
CVE-2007-3798
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-252
Updated
2026-11-02
EUVDEUVD-2007-3782 9.8

Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.

Record
EUVD-2007-3782
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-cg3g-c98g-38cg 9.8

Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote...

Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.

Record
GHSA-cg3g-c98g-38cg
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-252
Updated
2026-11-02
OSV 9.8

Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.

Record
CVE-2007-3798
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2007-3798 9.8

Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.

Record
DEBIAN-CVE-2007-3798
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
tcpdump
Debian:12
 before 3.9.5-3
3.9.5-3
tcpdump
Debian:13
 before 3.9.5-3
3.9.5-3
tcpdump
Debian:14
 before 3.9.5-3
3.9.5-3
tcpdump
Debian:3.1
 before 3.8.3-5sarge3, plus listed versions
3.8.3-53.8.3-5sarge13.8.3-5sarge2
3.8.3-5sarge3
tcpdump
Debian:4.0
 before 3.9.5-2etch1, plus listed versions
3.9.5-2
3.9.5-2etch1
arpwatch
Red Hat:enterprise_linux:5::client_workstation
 before 14:2.1a13-18.el5
14:2.1a13-18.el5
libpcap-devel
Red Hat:enterprise_linux:5::client_workstation
 before 14:0.9.4-11.el5
14:0.9.4-11.el5
tcpdump
Red Hat:enterprise_linux:5::client_workstation
 before 14:3.9.4-11.el5
14:3.9.4-11.el5
tcpdump-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 14:3.9.4-11.el5
14:3.9.4-11.el5
libpcap
Red Hat:enterprise_linux:5::client
 before 14:0.9.4-11.el5
14:0.9.4-11.el5
Show 23 moreShow less
Affected packages
PackageAffectedFixed
tcpdump
Red Hat:enterprise_linux:5::client
 before 14:3.9.4-11.el5
14:3.9.4-11.el5
tcpdump-debuginfo
Red Hat:enterprise_linux:5::client
 before 14:3.9.4-11.el5
14:3.9.4-11.el5
arpwatch
Red Hat:enterprise_linux:5::server
 before 14:2.1a13-18.el5
14:2.1a13-18.el5
libpcap
Red Hat:enterprise_linux:5::server
 before 14:0.9.4-11.el5
14:0.9.4-11.el5
libpcap-devel
Red Hat:enterprise_linux:5::server
 before 14:0.9.4-11.el5
14:0.9.4-11.el5
tcpdump
Red Hat:enterprise_linux:5::server
 before 14:3.9.4-11.el5
14:3.9.4-11.el5
tcpdump-debuginfo
Red Hat:enterprise_linux:5::server
 before 14:3.9.4-11.el5
14:3.9.4-11.el5
arpwatch
Red Hat:enterprise_linux:4::as
 before 14:2.1a13-12.el4
14:2.1a13-12.el4
libpcap
Red Hat:enterprise_linux:4::as
 before 14:0.8.3-12.el4
14:0.8.3-12.el4
tcpdump
Red Hat:enterprise_linux:4::as
 before 14:3.8.2-12.el4
14:3.8.2-12.el4
tcpdump-debuginfo
Red Hat:enterprise_linux:4::as
 before 14:3.8.2-12.el4
14:3.8.2-12.el4
arpwatch
Red Hat:enterprise_linux:4::desktop
 before 14:2.1a13-12.el4
14:2.1a13-12.el4
libpcap
Red Hat:enterprise_linux:4::desktop
 before 14:0.8.3-12.el4
14:0.8.3-12.el4
tcpdump
Red Hat:enterprise_linux:4::desktop
 before 14:3.8.2-12.el4
14:3.8.2-12.el4
tcpdump-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 14:3.8.2-12.el4
14:3.8.2-12.el4
arpwatch
Red Hat:enterprise_linux:4::es
 before 14:2.1a13-12.el4
14:2.1a13-12.el4
libpcap
Red Hat:enterprise_linux:4::es
 before 14:0.8.3-12.el4
14:0.8.3-12.el4
tcpdump
Red Hat:enterprise_linux:4::es
 before 14:3.8.2-12.el4
14:3.8.2-12.el4
tcpdump-debuginfo
Red Hat:enterprise_linux:4::es
 before 14:3.8.2-12.el4
14:3.8.2-12.el4
arpwatch
Red Hat:enterprise_linux:4::ws
 before 14:2.1a13-12.el4
14:2.1a13-12.el4
libpcap
Red Hat:enterprise_linux:4::ws
 before 14:0.8.3-12.el4
14:0.8.3-12.el4
tcpdump
Red Hat:enterprise_linux:4::ws
 before 14:3.8.2-12.el4
14:3.8.2-12.el4
tcpdump-debuginfo
Red Hat:enterprise_linux:4::ws
 before 14:3.8.2-12.el4
14:3.8.2-12.el4

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBtcpdump - Print-bgp.C Remote Integer Underflow2007-03-01

History

History
RecordedChangedSources
aliasesEUVD
affected, aliases, exploits, facts, references, titleExploit-DB, GitHub Advisories, OSV
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-3798 is a critical vulnerability (CVSS 9.8) in Tcpdump, published July 16, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 70.4%, the 99th percentile. Fixed in tcpdump 3.9.5-3.

References

Show 48 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open