Wind River Support Network

HomeDefectsLIN7-3380

Fixed

LIN7-3380 : Security Advisory - tcpdump - CVE-2015-2153

Created: Apr 7, 2015 Updated: Sep 8, 2018

Resolved Date: Apr 20, 2015

Previous ID: LIN4-32445

Found In Version: 7.0.0.3

Fix Version: 7.0.0.5

Severity: Standard

Applicable for: Wind River Linux 7

Component/s: Userspace

Description

The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via a crafted header length in an RPKI-RTR Protocol Data Unit (PDU). 

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2153

Other Downloads

CVEs

CVE-2015-2153