CVE-2015-3138
NONE EPSS 81.0%
Published Sep 28, 20178y ago · Modified Jun 17, 20262w ago
Published Sep 28, 2017 8y ago
Last Modified Jun 17, 2026 2w ago
Description
print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process crash).
Threat Intelligence
EPSS Exploit Probability
81.0% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Weaknesses 1
CWE-20 Improper Input Validation Validation
Affected Products 3
| Vendor | Product | Version | Range |
|---|---|---|---|
| tcpdump | tcpdump | * | ≤4.7.3 |
| opensuse | leap | 42.2 | any |
| opensuse_project | leap | 42.1 | any |
References 4
- lists.opensuse.org http://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html
- bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=1212342
- github.com https://github.com/the-tcpdump-group/tcpdump/commit/3ed82f4ed0095768529afc22b923c8f7171fff70
- github.com https://github.com/the-tcpdump-group/tcpdump/issues/446
Remediation
- bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=1212342
- github.com https://github.com/the-tcpdump-group/tcpdump/commit/3ed82f4ed0095768529afc22b923c8f7171fff70
- github.com https://github.com/the-tcpdump-group/tcpdump/issues/446