PT-2024-20208 · Tcpdump · Tcpdump

Published 2024-04-12 · Updated 2024-09-03 · CVE-2024-2397

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions tcpdump versions from 2023-06-05 to 2024-03-21 (git master branch)

Description The PPP printer in tcpdump can enter an infinite loop when reading a crafted DLT PPP SERIAL .pcap savefile due to a bug in packet data buffers management.

Recommendations For versions from 2023-06-05 to 2024-03-21, consider avoiding the use of crafted DLT PPP SERIAL .pcap savefiles until a fix is applied. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Infinite Loop

Weakness Enumeration

CWE-835

Related Identifiers

CVE-2024-2397

MGASA-2024-0177

OPENSUSE-SU-2024:14305-1

Affected Products

Tcpdump

References · 13

• https://github.com/the-tcpdump-group/tcpdump/commit/b9811ef5bb1b7d45a90e042f81f3aaf233c8bcb2 · Patch
• https://osv.dev/vulnerability/MGASA-2024-0177 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14305-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-2397 · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/GEZRGR3QCW2ZNFIAWMZZOG4ZLFLFNG2M · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/HUUI2MBVHFENXNBCHDQZP2RBBA2VD5HG · Vendor Advisory
• https://advisories.mageia.org/MGASA-2024-0177.html · Security Note
• https://osv.dev/vulnerability/CVE-2024-2397 · Vendor Advisory
• https://lists.freebsd.org/archives/freebsd-security/2024-September/000298.html · Note
• https://bugs.mageia.org/show_bug.cgi?id=33204 · Note
• https://t.me/cvenotify/76575 · Telegram Post
• https://suse.com/security/cve/CVE-2024-2397 · Note
• https://twitter.com/NetworkAndCo/status/1779792782388863003 · Twitter Post