CVE-2015-2155

概要

参考情報

• advisories.mageia.org/MGASA-2015-0114.html · Third Party Advisory
• lists.fedoraproject.org/pipermail/package-announce/2015-March/153834.html · Third Party Advisory
• lists.opensuse.org/opensuse-updates/2015-03/msg00084.html · Third Party Advisory
• packetstormsecurity.com/files/130730/tcpdump-Denial-Of-Service-Code-Execution.html · Patch
• debian.org/security/2015/dsa-3193 · Third Party Advisory
• mandriva.com/security/advisories · Broken Link
• mandriva.com/security/advisories · Broken Link
• oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html · Third Party Advisory
• securityfocus.com/archive/1/534829/100/0/threaded
• securityfocus.com/bid/73021
• securitytracker.com/id/1031937 · Third Party Advisory
• ubuntu.com/usn/USN-2580-1
• access.redhat.com/errata/RHSA-2017:1871
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• security.gentoo.org/glsa/201510-04

tcpdump のその他の脆弱性

• CVE-2023-1801中 6.5The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet.
• CVE-2019-15167緊急 9.1The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 3, a different vulnerability th…
• CVE-2020-8037高 7.5The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.
• CVE-2020-8036高 7.5The tok2strbuf() function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way.
• CVE-2019-15166高 7.5lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks.