CVE-2015-2155
Published: 24 March 2015
The force printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
tcpdump Launchpad, Ubuntu, Debian |
lucid |
Ignored
(end of life)
|
| precise |
Released
(4.2.1-1ubuntu2.2)
|
|
| trusty |
Released
(4.5.1-2ubuntu1.2)
|
|
| upstream |
Released
(4.7.2)
|
|
| utopic |
Released
(4.6.2-1ubuntu1.2)
|
|
| vivid |
Not vulnerable
(4.6.2-4ubuntu1)
|
|
|
Patches: upstream: https://github.com/the-tcpdump-group/tcpdump/commit/1d1e1d919677cabaa636e96a8c1cde7753419cae upstream: https://github.com/the-tcpdump-group/tcpdump/commit/3aad648ad05fd12217c56322d4514b659f3b9fa4 upstream: http://www.ca.tcpdump.org/cve/0001-in-some-cases-we-expect-tcpdump-to-fail-with-an-erro.patch upstream: http://www.ca.tcpdump.org/cve/0002-test-case-files-for-CVE-2015-2153-2154-2155.patch upstream: http://www.ca.tcpdump.org/cve/0003-test-case-for-cve2015-0261-corrupted-IPv6-mobility-h.patch |
||
| This vulnerability is mitigated in part by an AppArmor profile. | ||