Debian Security Advisory DSA 854-1 (tcpdump)

Summary
The remote host is missing an update to tcpdump announced via advisory DSA 854-1. Simon Nielsen discovered that the BGP dissector in tcpdump, a powerful tool for network monitoring and data acquisition, does not properly handle a -1 return value from an internal function that decodes data packets. A specially crafted BGP packet can cause a denial of service via an infinite loop. The old stable distribution (woody) is not affected by this problem.
Solution
For the stable distribution (sarge) this problem has been fixed in version 3.8.3-5sarge1. We recommend that you upgrade your tcpdump package. https://secure1.securityspace.com/smysecure/catid.html?in=DSA%20854-1