TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via ISAKMP packets containing a Delete payload with a large number of SPI's which causes an out-of-bounds read as demonstrated by the Striker ISAKMP Protocol Test Suite.