CVE-2015-3138

Опубликовано: 28 сент. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process crash).

Ссылки

http://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1212342
Issue Tracking
Patch
Third Party Advisory
https://github.com/the-tcpdump-group/tcpdump/commit/3ed82f4ed0095768529afc22b923c8f7171fff70
Issue Tracking
Patch
Third Party Advisory
https://github.com/the-tcpdump-group/tcpdump/issues/446
Issue Tracking
Patch
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1212342
Issue Tracking
Patch
Third Party Advisory
https://github.com/the-tcpdump-group/tcpdump/commit/3ed82f4ed0095768529afc22b923c8f7171fff70
Issue Tracking
Patch
Third Party Advisory
https://github.com/the-tcpdump-group/tcpdump/issues/446
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*

Версия до 4.7.3 (включая)

Конфигурация 2

Одно из

cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*

cpe:2.3:o:opensuse_project:leap:42.1:*:*:*:*:*:*:*

EPSS

Процентиль: 75%

0.00877

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2015-3138

CVSS3: 7.5

ubuntu

больше 8 лет назад

print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process crash).

CVE-2015-3138

redhat

почти 11 лет назад

print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process crash).

CVE-2015-3138

CVSS3: 7.5

debian

больше 8 лет назад

print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a ...

GHSA-75gj-485x-v865

CVSS3: 7.5

github

больше 3 лет назад

print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process crash).

openSUSE-SU-2017:1199-1

suse-cvrf

больше 8 лет назад

Security update for tcpdump, libpcap

EPSS

Процентиль: 75%

0.00877

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-20