NVD

Id
24298  
Name
CVE-2015-2154  
Description
The osi_print_cksum function in print-isoclns.c in the ethernet printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) length, (2) offset, or (3) base pointer checksum value.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2015-03-24  
Modified Date
2017-01-02  
Seq
2015-2154  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
128610 24298 CVE-2015-2154 http://advisories.mageia.org/MGASA-2015-0114.html  View
128611 24298 CVE-2015-2154 FEDORA-2015-4939  View
128612 24298 CVE-2015-2154 FEDORA-2015-4804  View
128613 24298 CVE-2015-2154 openSUSE-SU-2015:0616  View
128614 24298 CVE-2015-2154 http://packetstormsecurity.com/files/130730/tcpdump-Denial-Of-Service-Code-Execution.html  View
128615 24298 CVE-2015-2154 DSA-3193  View
128616 24298 CVE-2015-2154 MDVSA-2015:125  View
128617 24298 CVE-2015-2154 MDVSA-2015:182  View
128618 24298 CVE-2015-2154 http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html  View
128619 24298 CVE-2015-2154 20150309 tcpdump 4.7.2 remote crashes  View
128620 24298 CVE-2015-2154 73017  View
128621 24298 CVE-2015-2154 1031937  View
128622 24298 CVE-2015-2154 USN-2580-1  View
128623 24298 CVE-2015-2154 https://bugzilla.redhat.com/show_bug.cgi?id=1201797  View
128624 24298 CVE-2015-2154 GLSA-201510-04  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6616 JVNDB-2015-001936 tcpdump の Ethernet プリンタの print-isoclns.c 内の osi_print_cksum 関数におけるサービス運用妨害 (DoS) の脆弱性 tcpdump の Ethernet プリンタの print-isoclns.c 内の osi_print_cksum 関数には、サービス運用妨害 (out-of-bounds read およびクラッシュ) 状態にされる脆弱性が存在します。 CVE-2015-2154 79379 CVE-2015-2154 24298 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001936.html 2015-03-10 2015-04-08 View