CVE-2000-0333
MediumExploitation Probability (EPSS)
Very high risk94th percentile - higher than 94% of all known CVEs
Summary
tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself, which causes tcpdump to enter an infinite loop while decompressing the packet.
Risk Assessment
Attackers can exploit this vulnerability to disrupt the operation of network traffic monitoring systems, potentially leading to service availability loss.
Recommendation
It is recommended to update tcpdump and Ethereal to the latest versions and to monitor DNS traffic for detecting and blocking suspicious packets.
Original NVD description (English source)
tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself, which causes tcpdump to enter an infinite loop while decompressing the packet.