CVE-2015-2153
NoneCVSS
—
EPSS
19.0%
Published
Mar 24, 2015
CISA due date
—
The record
The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via a crafted header length in an RPKI-RTR Protocol Data Unit (PDU).
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | tcpdump | 0 | 4.6.2-4 |
| Debian:12 | tcpdump | 0 | 4.6.2-4 |
| Debian:13 | tcpdump | 0 | 4.6.2-4 |
| Debian:7 | tcpdump | 0 | 4.3.0-1+deb7u2 |
| Mageia:4 | tcpdump | 0 | 4.4.0-2.3.mga4 |
| Red Hat:enterprise_linux:7::client | tcpdump | 0 | 14:4.9.0-5.el7 |
| Red Hat:enterprise_linux:7::client | tcpdump-debuginfo | 0 | 14:4.9.0-5.el7 |
| Red Hat:enterprise_linux:7::computenode | tcpdump | 0 | 14:4.9.0-5.el7 |
| Red Hat:enterprise_linux:7::computenode | tcpdump-debuginfo | 0 | 14:4.9.0-5.el7 |
| Red Hat:enterprise_linux:7::server | tcpdump | 0 | 14:4.9.0-5.el7 |
| Red Hat:enterprise_linux:7::server | tcpdump-debuginfo | 0 | 14:4.9.0-5.el7 |
| Red Hat:enterprise_linux:7::workstation | tcpdump | 0 | 14:4.9.0-5.el7 |
| Red Hat:enterprise_linux:7::workstation | tcpdump-debuginfo | 0 | 14:4.9.0-5.el7 |
| SUSE:Linux Enterprise Desktop 12 | tcpdump | 0 | 4.5.1-7.1 |
| SUSE:Linux Enterprise Desktop 12 SP1 | libpcap | 0 | 1.8.1-9.1 |
| SUSE:Linux Enterprise Desktop 12 SP1 | tcpdump | 0 | 4.9.0-13.1 |
| SUSE:Linux Enterprise Desktop 12 SP2 | libpcap | 0 | 1.8.1-9.1 |
| SUSE:Linux Enterprise Desktop 12 SP2 | tcpdump | 0 | 4.9.0-13.1 |
| SUSE:Linux Enterprise Server 12 | tcpdump | 0 | 4.5.1-7.1 |
| SUSE:Linux Enterprise Server 12 SP1 | libpcap | 0 | 1.8.1-9.1 |
| SUSE:Linux Enterprise Server 12 SP1 | tcpdump | 0 | 4.9.0-13.1 |
| SUSE:Linux Enterprise Server 12 SP2 | libpcap | 0 | 1.8.1-9.1 |
| SUSE:Linux Enterprise Server 12 SP2 | tcpdump | 0 | 4.9.0-13.1 |
| SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 | libpcap | 0 | 1.8.1-9.1 |
| SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 | tcpdump | 0 | 4.9.0-13.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 | tcpdump | 0 | 4.5.1-7.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | libpcap | 0 | 1.8.1-9.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | tcpdump | 0 | 4.9.0-13.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | libpcap | 0 | 1.8.1-9.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | tcpdump | 0 | 4.9.0-13.1 |
| SUSE:Linux Enterprise Software Development Kit 12 SP1 | libpcap | 0 | 1.8.1-9.1 |
| SUSE:Linux Enterprise Software Development Kit 12 SP2 | libpcap | 0 | 1.8.1-9.1 |
| SUSE:Linux Enterprise Workstation Extension 12 SP1 | libpcap | 0 | 1.8.1-9.1 |
| SUSE:Linux Enterprise Workstation Extension 12 SP2 | libpcap | 0 | 1.8.1-9.1 |
| Ubuntu:14.04:LTS | tcpdump | 0 | 4.5.1-2ubuntu1.2 |
| openSUSE:Tumbleweed | tcpdump | 0 | 4.7.4-3.4 |
Related vulnerabilities
- CVE-2017-16808 tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in… Also affects tcpdump
- CVE-2017-11108 tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer… Also affects tcpdump
- CVE-2016-7922 The AH parser in tcpdump before 4.9.0 has a buffer overflow in print-ah.c:ah_print(). Also affects tcpdump
- CVE-2015-0261 Integer signedness error in the mobility_opt_print function in the IPv6 mobility printer… Also affects tcpdump
- CVE-2014-8768 Multiple Integer underflows in the geonet_print function in tcpdump 4.5.0 through 4.6.2… Also affects tcpdump
- CVE-2014-8767 Integer underflow in the olsr_print function in tcpdump 3.9.6 through 4.6.2, when in… Also affects tcpdump
- CVE-2007-3798 Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows… Also affects tcpdump
- CVE-2005-1267 The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value… Also affects tcpdump