Lucene search

K
kasperskyKaspersky LabKLA10498
HistoryMar 24, 2015 - 12:00 a.m.

KLA10498 Denial of service vulnerabilities in tcpdump

2015-03-2400:00:00
Kaspersky Lab
threats.kaspersky.com
47

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.17 Low

EPSS

Percentile

96.0%

Detect date:

03/24/2015

Severity:

Critical

Description:

Multiple serious vulnerabilities have been found in tcpdump. Malicious users can exploit these vulnerabilities to cause denial of service.

Affected products:

tcpdump versions earlier than 4.7.2

Solution:

Update to latest version!
Get tcpdump

Impacts:

DoS

Related products:

tcpdump

CVE-IDS:

CVE-2015-02617.5Critical
CVE-2015-21557.5Critical
CVE-2015-21545.0Critical
CVE-2015-21535.0Critical

Exploitation:

Public exploits exist for this vulnerability.

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.17 Low

EPSS

Percentile

96.0%