KLA10498 Denial of service vulnerabilities in tcpdump

Multiple serious vulnerabilities have been found in tcpdump. Malicious users can exploit these vulnerabilities to cause denial of service.

Below is a complete list of vulnerabilities

1. An unknown vulnerability can be exploited remotely via a specially designed packets and other unknown vectors;
2. Integer signedness can be exploited remotely via a cpecially designed length value.

Original advisories

Exploitation

Public exploits exist for this vulnerability.

Related products

tcpdump

CVE list

CVE-2015-0261 critical

CVE-2015-2155 critical

CVE-2015-2154 critical

CVE-2015-2153 critical

Solution

Update to latest version!

Get tcpdump

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• tcpdump versions earlier than 4.7.2