Lucene search

K
mageiaGentoo FoundationMGASA-2024-0177
HistoryMay 15, 2024 - 8:32 a.m.

Updated tcpdump packages fix security vulnerability

2024-05-1508:32:29
Gentoo Foundation
advisories.mageia.org
6
tcpdump
ppp printer
security vulnerability
packet data buffers
cve-2024-2397
unix

6.2 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

Due to a bug in packet data buffers management, the PPP printer in tcpdump can enter an infinite loop when reading a crafted DLT_PPP_SERIAL .pcap savefile. (CVE-2024-2397)

OSVersionArchitecturePackageVersionFilename
Mageia9noarchtcpdump< 4.99.4-1.1tcpdump-4.99.4-1.1.mga9

6.2 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%