TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via ISAKMP packets containing a Delete payload with a large number of SPI's, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite.
Get an AI-powered plain-language explanation of this vulnerability and remediation steps.
Login to generate AI explanation30 reference(s) from NVD