CVE-2015-0261
HighSummary
Integer signedness error in the mobility_opt_print function in the IPv6 mobility printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) or possibly execute arbitrary code via a negative length value.
Risk Assessment
Organizations may be exposed to attacks that lead to system crashes or allow unauthorized code execution, potentially resulting in data loss or security breaches.
Recommendation
It is recommended to update tcpdump to version 4.7.2 or later to mitigate this vulnerability.
Other vulnerabilities in tcpdump
See all- CVE-2015-3138High
The print-wb.c file in tcpdump before version 4.7.4 contains a vulnerability that allows remote attackers to cause a denial of service through a segmentation fault and process crash.
- CVE-2017-12989High
The RESP parser in tcpdump before version 4.9.2 could enter an infinite loop due to a bug in print-resp.c:resp_get_length().
- CVE-2017-11108High
tcpdump version 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.
- CVE-2015-2155High
A vulnerability in tcpdump before version 4.7.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
- CVE-2017-13725Critical
The IPv6 routing header parser in tcpdump before version 4.9.2 has a buffer over-read in the rt6_print() function.
- CVE-2017-13690Critical
The IKEv2 parser in tcpdump before version 4.9.2 has a buffer over-read in print-isakmp.c in several functions.
- CVE-2017-13689Critical
The IKEv1 parser in tcpdump before version 4.9.2 has a buffer over-read in the ikev1_id_print() function.
- CVE-2017-13688Critical
The OLSR parser in tcpdump before version 4.9.2 has a buffer over-read in the olsr_print() function.
- CVE-2017-13687Critical
The HDLC parser in tcpdump before version 4.9.2 has a buffer over-read in the chdlc_print() function.
- CVE-2017-13055Critical
The ISO IS-IS parser in tcpdump before version 4.9.2 has a buffer over-read in the function isis_print_is_reach_subtlv().
Original NVD description (English source)
Integer signedness error in the mobility_opt_print function in the IPv6 mobility printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) or possibly execute arbitrary code via a negative length value.