CVE-2024-2397

2024-04-1200:00:00

ubuntu.com

tcpdump

ppp printer

infinite loop

crafted dlt_ppp_serial

pcap

git master branch

2023-06-05 to 2024-03-21

buffer management

6.2 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

15.7%

JSON

Due to a bug in packet data buffers management, the PPP printer in tcpdump
can enter an infinite loop when reading a crafted DLT_PPP_SERIAL .pcap
savefile. This problem does not affect any tcpdump release, but it affected
the git master branch from 2023-06-05 to 2024-03-21.