Description (CNA)
libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. A crafted filter program or the 'protochain' primitive used on a crafted network packet can cause the interpreter to loop infinitely.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| The Tcpdump Group / libpcap | affected 0 before 1.10.7 |
CWE
CWE-835
References
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.