The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via a crafted header length in an RPKI-RTR Protocol Data Unit (PDU).
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade tcpdump-debuginfoUpgrade tcpdump | Aug 28, 2019 | Mar 24, 2015 |
| Debian | — | Upgrade tcpdump | Jul 30, 2024 | Mar 24, 2015 |
| Gentoo Linux | — | Upgrade net-analyzer/tcpdump. | Oct 30, 2017 | Mar 24, 2015 |
| Huawei Euleros 2_0_sp1 | — | Upgrade tcpdump | Nov 30, 2017 | Mar 24, 2015 |
| Huawei Euleros 2_0_sp2 | — | Upgrade tcpdump | Nov 30, 2017 | Mar 24, 2015 |
| Oracle Solaris | — | Upgrade diagnostic/tcpdump to version 4.7.4-0.175.2.12.0.4.0 on Solaris 11.2 | May 29, 2017 | Mar 24, 2015 |
| Oracle_linux | — | Upgrade tcpdump | Aug 8, 2017 | Mar 24, 2015 |
| Redhat_linux | — | Upgrade tcpdumpNo solution existsUpgrade tcpdump-debuginfo | Aug 3, 2017 | Mar 24, 2015 |
| Suse | — | Upgrade tcpdumpUpgrade libpcap1-32bitUpgrade libpcap1Upgrade libpcap-devel | Dec 18, 2015 | Mar 24, 2015 |
| Ubuntu | — | Upgrade tcpdump | Nov 8, 2024 | Mar 24, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub