CVE-2015-0261 Integer overflow in n/a

What is CVE-2015-0261?

CVE-2015-0261 is a high-severity vulnerability in Tcpdump Tcpdump, published on 24 Mar 2015. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Integer signedness error in the mobility_opt_print function in the IPv6 mobility printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) or possibly execute arbitrary code via a negative length value.

Weakness: CWE-189

Which versions are affected by CVE-2015-0261?

It affects 1 product.

Products include Tcpdump Tcpdump.

How do I fix CVE-2015-0261?

Upgrade to a fixed version.

Is CVE-2015-0261 being exploited?

There is no known exploitation of CVE-2015-0261 in the wild and no public exploit code.

Other vulnerabilities in Tcpdump Tcpdump

• CVE-2018-10103 tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2). Critical 9.8
• CVE-2018-10105 Denial of service in n/a Critical 9.8
• CVE-2017-12893 Memory corruption in n/a Critical 9.8
• CVE-2017-12894 Memory corruption in n/a Critical 9.8
• CVE-2017-12895 Memory corruption in n/a Critical 9.8

All Tcpdump Tcpdump vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2015-0261, GHSA-58ww-chv2-94cr, UBUNTU-CVE-2015-0261.