CVE-2015-2154: Buffer Overflow
A flaw was found in tcpdump's ethernet printer. A remote attacker could use this flaw to cause tcpdump to crash, resulting in a denial of service.
Upstream patch:
http://www.ca.tcpdump.org/cve/0002-test-case-files-for-CVE-2015-2153-2154-2155.patch
Other sources
The osiprintcksum function in print-isoclns.c in the ethernet printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) length, (2) offset, or (3) base pointer checksum value.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-2154?
CVE-2015-2154 has a severity rating that indicates it can cause denial of service due to remote exploitation.
How do I fix CVE-2015-2154?
To fix CVE-2015-2154, you should upgrade tcpdump to version 4.7.2 or a later version.
What systems are affected by CVE-2015-2154?
CVE-2015-2154 affects tcpdump versions up to 4.7.0.
Can CVE-2015-2154 be exploited remotely?
Yes, a remote attacker can exploit CVE-2015-2154 to crash tcpdump.
What consequences can occur from CVE-2015-2154?
Exploitation of CVE-2015-2154 can lead to a crash of the tcpdump application, resulting in a denial of service.