CVE-2015-2153
Description
The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via a crafted header length in an RPKI-RTR Protocol Data Unit (PDU).
Predictions
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No mitigations published for this CVE yet.
The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.
✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here withsource_tier=community-verified.
Exploits
Public proof-of-concept code below. AS-IS, for defenders and authorised testing only.
Exploit-DB
TcpDump - rpki_rtr_pdu_print Out-of-Bounds Denial of Service
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| debian | bookworm | fixed | 4.6.2-4 |
| debian | bullseye | fixed | 4.6.2-4 |
| debian | forky | fixed | 4.6.2-4 |
| debian | sid | fixed | 4.6.2-4 |
| debian | trixie | fixed | 4.6.2-4 |
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| tcpdump | tcpdump | {"endIncluding":"4.7.0"} | |
References
- http://advisories.mageia.org/MGASA-2015-0114.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153834.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153999.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00084.html
- http://packetstormsecurity.com/files/130730/tcpdump-Denial-Of-Service-Code-Execution.html
- http://www.debian.org/security/2015/dsa-3193
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:125
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:182
- http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
- http://www.securityfocus.com/archive/1/534829/100/0/threaded
- http://www.securityfocus.com/bid/73018
- http://www.securitytracker.com/id/1031937
- http://www.ubuntu.com/usn/USN-2580-1
- https://access.redhat.com/errata/RHSA-2017:1871
- https://bugzilla.redhat.com/show_bug.cgi?id=1201795
- https://security.gentoo.org/glsa/201510-04
- https://www.exploit-db.com/exploits/37663/
- https://security-tracker.debian.org/tracker/CVE-2015-2153
CWEs
CWE-119
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.