The osi_print_cksum function in print-isoclns.c in the ethernet printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) length, (2) offset, or (3) base pointer checksum value.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade tcpdump-debuginfoUpgrade tcpdump | Aug 28, 2019 | Mar 24, 2015 |
| Debian | — | Upgrade tcpdump | Jul 30, 2024 | Mar 24, 2015 |
| Gentoo Linux | — | Upgrade net-analyzer/tcpdump. | Oct 30, 2017 | Mar 24, 2015 |
| Huawei Euleros 2_0_sp1 | — | Upgrade tcpdump | Nov 30, 2017 | Mar 24, 2015 |
| Huawei Euleros 2_0_sp2 | — | Upgrade tcpdump | Nov 30, 2017 | Mar 24, 2015 |
| Oracle Solaris | — | Upgrade diagnostic/tcpdump to version 4.7.4-0.175.2.12.0.4.0 on Solaris 11.2 | May 29, 2017 | Mar 24, 2015 |
| Oracle_linux | — | Upgrade tcpdump | Aug 8, 2017 | Mar 24, 2015 |
| Redhat_linux | — | Upgrade tcpdump-debuginfoNo solution existsUpgrade tcpdump | Aug 3, 2017 | Mar 24, 2015 |
| Suse | — | Upgrade libpcap-develUpgrade libpcap1Upgrade tcpdumpUpgrade libpcap1-32bit | Dec 18, 2015 | Mar 24, 2015 |
| Ubuntu | — | Upgrade tcpdump | Nov 8, 2024 | Mar 24, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub