CVE-2015-2154 Denial of service in n/a
Remote attackers can cause a denial of service in tcpdump via crafted checksum values in ISOClns packets, leading to an out-of-bounds read and crash.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2015-2154?
CVE-2015-2154 is a medium-severity denial of service vulnerability in Tcpdump Tcpdump, published on 24 Mar 2015. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The osi_print_cksum function in print-isoclns.c in the ethernet printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) length, (2) offset, or (3) base pointer checksum value.
Weakness: CWE-119
Which versions are affected by CVE-2015-2154?
It affects 1 product.
Products include Tcpdump Tcpdump.
How do I fix CVE-2015-2154?
Upgrade to a fixed version.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2015-2154 being exploited?
There is no known exploitation of CVE-2015-2154 in the wild and no public exploit code.
Other vulnerabilities in Tcpdump Tcpdump
Sources
Also known as DEBIAN-CVE-2015-2154, GHSA-78vx-8c5h-72jr, UBUNTU-CVE-2015-2154.