Integer signedness error in the mobility_opt_print function in the IPv6 mobility printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) or possibly execute arbitrary code via a negative length value.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade tcpdumpUpgrade tcpdump-debuginfo | Aug 28, 2019 | Mar 24, 2015 |
| Debian | — | Upgrade tcpdump | Jul 30, 2024 | Mar 24, 2015 |
| Gentoo Linux | — | Upgrade net-analyzer/tcpdump. | Oct 30, 2017 | Mar 24, 2015 |
| Huawei Euleros 2_0_sp1 | — | Upgrade tcpdump | Nov 30, 2017 | Mar 24, 2015 |
| Huawei Euleros 2_0_sp2 | — | Upgrade tcpdump | Nov 30, 2017 | Mar 24, 2015 |
| Oracle Solaris | — | Upgrade diagnostic/tcpdump to version 4.7.4-0.175.2.12.0.4.0 on Solaris 11.2 | May 29, 2017 | Mar 24, 2015 |
| Oracle_linux | — | Upgrade tcpdump | Aug 8, 2017 | Mar 24, 2015 |
| Redhat_linux | — | No solution existsUpgrade tcpdumpUpgrade tcpdump-debuginfo | Aug 3, 2017 | Mar 24, 2015 |
| Suse | — | Upgrade tcpdumpUpgrade libpcap-develUpgrade libpcap1Upgrade libpcap1-32bit | Dec 18, 2015 | Mar 24, 2015 |
| Ubuntu | — | Upgrade tcpdump | Nov 8, 2024 | Mar 24, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub