Executive Summary

The CVE-1999-1024 vulnerability in tcpdump 3.4a allows remote attackers to trigger a denial‑of‑service by sending a packet with a zero‑length header. The ip_print routine enters an infinite loop, causing tcpdump to core‑dump when attempting to print the packet, potentially disrupting network monitoring services.

---

Authoritative CVE Metadata - CVSS Base Score: 7.5 (HIGH) - Published: 2001-11-28T05:00:00.000 - Last Modified: 2026-09-25T20:10:00.123

Original Description: ip_print procedure in Tcpdump 3.4a allows remote attackers to cause a denial of service via a packet with a zero length header, which causes an infinite loop and core dump when tcpdump prints the packet.

"The world makes way for the man who knows where he is going."

— Ralph Emerson