Patchwire CVEs, their patch status, and feeds to follow them

CVE-2015-2154

Fixed in a distro release EPSS 4%

The osi_print_cksum function in print-isoclns.c in the ethernet printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) length, (2) offset, or (3) base pointer checksum value.

Published 2015-03-24 · CVE record · OSV

Products: tcpdump

Distro releases

ReleasePackageFixed in
Debian 12tcpdump4.6.2-4
Debian 13tcpdump4.6.2-4
Debian 14tcpdump4.6.2-4
Debian 6.0tcpdump4.1.1-1+deb6u2
Debian 7tcpdump4.3.0-1+deb7u2
Red Hat Enterprise Linux 7tcpdump14:4.9.0-5.el7
Red Hat Enterprise Linux 7tcpdump-debuginfo14:4.9.0-5.el7
SUSE Linux Enterprise Desktop 12tcpdump4.5.1-7.1
SUSE Linux Enterprise Desktop 12 SP1libpcap1.8.1-9.1
SUSE Linux Enterprise Desktop 12 SP1tcpdump4.9.0-13.1
SUSE Linux Enterprise Desktop 12 SP2libpcap1.8.1-9.1
SUSE Linux Enterprise Desktop 12 SP2tcpdump4.9.0-13.1
SUSE Linux Enterprise Server 12tcpdump4.5.1-7.1
SUSE Linux Enterprise Server 12 SP1libpcap1.8.1-9.1
SUSE Linux Enterprise Server 12 SP1tcpdump4.9.0-13.1
SUSE Linux Enterprise Server 12 SP2libpcap1.8.1-9.1
SUSE Linux Enterprise Server 12 SP2tcpdump4.9.0-13.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2libpcap1.8.1-9.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2tcpdump4.9.0-13.1
SUSE Linux Enterprise Server for SAP Applications 12tcpdump4.5.1-7.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1libpcap1.8.1-9.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1tcpdump4.9.0-13.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2libpcap1.8.1-9.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2tcpdump4.9.0-13.1
SUSE Linux Enterprise Software Development Kit 12 SP1libpcap1.8.1-9.1
SUSE Linux Enterprise Software Development Kit 12 SP2libpcap1.8.1-9.1
SUSE Linux Enterprise Workstation Extension 12 SP1libpcap1.8.1-9.1
SUSE Linux Enterprise Workstation Extension 12 SP2libpcap1.8.1-9.1
Ubuntu 14.04 LTStcpdump4.5.1-2ubuntu1.2
openSUSE Tumbleweedtcpdump4.7.4-3.4