CVE-2015-3138: Input Validation
print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process crash).
Other sources
Recently an independent researcher had discovered a vulnerability in tcpdump, which would be a segmentation fault triggered through feeding into tcpdump a crafted packet, either from a live network interface or from a .pcap file. It has been assigned CVE-2015-3138 and you can find the steps to reproduce it here:
https://github.com/the-tcpdump-group/tcpdump/issues/446
Subsequent analysis made it clear that the vulnerability was introduced into one of tcpdump functions by an accident not long before the 4.7.0 release. It remained in tcpdump releases 4.7.2 and 4.7.3 (4.7.1 was never released). The next release, 4.7.4, will have it fixed, but it is likely to be delayed. Since the vulnerability has been public for a few weeks, meanwhile you might want to fix it in an update to the tcpdump package. The fix is in the following commit:
https://github.com/the-tcpdump-group/tcpdump/commit/3ed82f4ed0095768529afc22b923c8f7171fff70
Statement:
Not vulnerable. This issue did not affect the versions of tcpdump as shipped with Red Hat Enterprise Linux 5, 6 and 7 as they did not include vulnerable code.
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2015-3138?
CVE-2015-3138 has a severity rating of medium due to its potential to cause denial of service.
How do I fix CVE-2015-3138?
To fix CVE-2015-3138, upgrade tcpdump to version 4.7.4 or later.
What systems are affected by CVE-2015-3138?
CVE-2015-3138 affects tcpdump versions prior to 4.7.4 and specific OpenSUSE Leap versions.
Can CVE-2015-3138 be exploited remotely?
Yes, CVE-2015-3138 can be exploited remotely by sending crafted packets to tcpdump.
What type of vulnerability is CVE-2015-3138?
CVE-2015-3138 is a vulnerability that allows for a segmentation fault and process crash, leading to denial of service.