CVE-2015-2154
CVE-2015-2154
The osi_print_cksum function in print-isoclns.c in the ethernet printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) length, (2) offset, or (3) base pointer checksum value.
Affected products
n/a · n/aWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
http://advisories.mageia.org/MGASA-2015-0114.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-March/153834.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-March/153999.htmlhttp://lists.opensuse.org/opensuse-updates/2015-03/msg00084.htmlhttp://packetstormsecurity.com/files/130730/tcpdump-Denial-Of-Service-Code-Execution.htmlhttps://access.redhat.com/errata/RHSA-2017:1871https://bugzilla.redhat.com/show_bug.cgi?id=1201797https://security.gentoo.org/glsa/201510-04http://www.debian.org/security/2015/dsa-3193http://www.mandriva.com/security/advisories?name=MDVSA-2015:125http://www.mandriva.com/security/advisories?name=MDVSA-2015:182http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html