CVE-2024-2397 infinite loop in the PPP printer of tcpdump

2024-04-1213:22:01

CWE-835

Tcpdump

www.cve.org

cve-2024-2397

tcpdump

infinite loop

bug

ppp printer

crafted pcap

6.2 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

Due to a bug in packet data buffers management, the PPP printer in tcpdump can enter an infinite loop when reading a crafted DLT_PPP_SERIAL .pcap savefile. This problem does not affect any tcpdump release, but it affected the git master branch from 2023-06-05 to 2024-03-21.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "PPP printer"
    ],
    "product": "tcpdump",
    "vendor": "The Tcpdump Group",
    "versions": [
      {
        "lessThan": "b9811ef",
        "status": "affected",
        "version": "0d4083e",
        "versionType": "git"
      }
    ]
  }
]