CVE-2015-2153 — Vulnetix

Try Vulnetix Request Demo

CVE-2015-2153 PUBLISHED

The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via a crafted header length in an RPKI-RTR Protocol Data Unit (PDU).

EPSS 11.32% · 93.5th percentile

Risk Scores

EPSS Score

11.32%

93.5th percentile

Affected Products

Vendor	Product	Versions
Ubuntu:14.04:LTS	tcpdump	0, 4.4.0-1ubuntu1, 4.5.1-2ubuntu1

Timeline

Mar 24, 2015 CVE Published
Jul 21, 2015 PoC Published
Feb 4, 2022 EPSS Score
Mar 28, 2022 EPSS Score
Jul 10, 2022 EPSS Score
Aug 12, 2022 EPSS Score
Oct 23, 2022 EPSS Score
Dec 14, 2022 EPSS Score
Mar 7, 2023 EPSS Score
Mar 28, 2023 EPSS Score
Jul 10, 2023 EPSS Score
Aug 31, 2023 EPSS Score

References

https://ubuntu.com/security/CVE-2015-2153 third-party-advisory
http://seclists.org/bugtraq/2015/Mar/33 third-party-advisory
https://ubuntu.com/security/notices/USN-2580-1 vendor-advisory
https://www.cve.org/CVERecord?id=CVE-2015-2153 third-party-advisory

Open in Interactive Console →