PT-2017-6630 · Tcpdump+2 · Tcpdump+2

Brandonprry · Published 2017-04-26 · Updated 2024-06-15 · CVE-2015-3138

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.7.4

Description The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault and process crash.

Recommendations For versions prior to 4.7.4, update to version 4.7.4 or later to resolve the issue.

Exploit

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2019-1321

CVE-2015-3138

OPENSUSE-SU-2024:10396-1

SUSE-SU-2017:1110-1

Affected Products

Alt Linux

Suse

Tcpdump

References · 202

• 🔥 https://github.com/arntsonl/CVE-2015-2153 · Exploit
• https://github.com/the-tcpdump-group/tcpdump/commit/3ed82f4ed0095768529afc22b923c8f7171fff70 · Patch
• https://github.com/the-tcpdump-group/tcpdump/issues/446 · Patch
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13725 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7940 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7934 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5342 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12999 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13026 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13025 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12988 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12991 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13049 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12994 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13053 · Security Note