CVE-2024-2397 infinite loop in the PPP printer of tcpdump

2024-04-1213:22:01

CWE-835

Tcpdump

github.com

cve-2024-2397

infinite loop

tcpdump

ppp printer

bug

packet data buffers

management

dlt_ppp_serial

pcap savefile.

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Due to a bug in packet data buffers management, the PPP printer in tcpdump can enter an infinite loop when reading a crafted DLT_PPP_SERIAL .pcap savefile. This problem does not affect any tcpdump release, but it affected the git master branch from 2023-06-05 to 2024-03-21.

CNA Affected

[
  {
    "vendor": "The Tcpdump Group",
    "modules": [
      "PPP printer"
    ],
    "product": "tcpdump",
    "versions": [
      {
        "status": "affected",
        "version": "0d4083e",
        "lessThan": "b9811ef",
        "versionType": "git"
      }
    ],
    "defaultStatus": "unaffected"
  }
]