CVE-2000-0333

CVSS 2.0 Score 5.0 of 10 (medium)

Details

Published May 31, 1999
Updated: Nov 20, 2024

Summary

CVE-2000-0333 is a denial-of-service vulnerability affecting tcpdump, Ethereal, and other packet sniffer applications. Malformed DNS packets with a jump offset that references itself can trigger an infinite loop in tcpdump while decompressing the packet. This issue results in the program becoming unresponsive and causing a denial-of-service condition. Attackers can exploit this vulnerability remotely, making it a significant security concern for networks using these packet sniffer tools.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Ethereal Group Ethereal

Affected Vendors

  • Ethereal Group
  • LBL