Vulnerability Details CVE-2015-3138
print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process crash).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 75.0%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- http://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1212342
- https://github.com/the-tcpdump-group/tcpdump/commit/3ed82f4ed0095768529afc22b923c8f7171fff70
- https://github.com/the-tcpdump-group/tcpdump/issues/446
- http://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1212342
- https://github.com/the-tcpdump-group/tcpdump/commit/3ed82f4ed0095768529afc22b923c8f7171fff70
- https://github.com/the-tcpdump-group/tcpdump/issues/446
Products affected by CVE-2015-3138
-
cpe:2.3:a:tcpdump:tcpdump:3.5.1
-
cpe:2.3:a:tcpdump:tcpdump:3.5.2
-
cpe:2.3:a:tcpdump:tcpdump:3.6.1
-
cpe:2.3:a:tcpdump:tcpdump:3.6.2
-
cpe:2.3:a:tcpdump:tcpdump:3.6.3
-
cpe:2.3:a:tcpdump:tcpdump:3.7.1
-
cpe:2.3:a:tcpdump:tcpdump:3.7.2
-
cpe:2.3:a:tcpdump:tcpdump:3.8.1
-
cpe:2.3:a:tcpdump:tcpdump:3.8.2
-
cpe:2.3:a:tcpdump:tcpdump:3.8.3
-
cpe:2.3:a:tcpdump:tcpdump:3.9.1
-
cpe:2.3:a:tcpdump:tcpdump:3.9.2
-
cpe:2.3:a:tcpdump:tcpdump:3.9.3
-
cpe:2.3:a:tcpdump:tcpdump:3.9.5
-
cpe:2.3:a:tcpdump:tcpdump:3.9.6
-
cpe:2.3:a:tcpdump:tcpdump:3.9.7
-
cpe:2.3:a:tcpdump:tcpdump:3.9.8
-
cpe:2.3:a:tcpdump:tcpdump:4.0.0
-
cpe:2.3:a:tcpdump:tcpdump:4.1.0
-
cpe:2.3:a:tcpdump:tcpdump:4.1.1
-
cpe:2.3:a:tcpdump:tcpdump:4.2.1
-
cpe:2.3:a:tcpdump:tcpdump:4.3.0
-
cpe:2.3:a:tcpdump:tcpdump:4.4.0
-
cpe:2.3:a:tcpdump:tcpdump:4.5.0
-
cpe:2.3:a:tcpdump:tcpdump:4.5.1
-
cpe:2.3:a:tcpdump:tcpdump:4.6.0
-
cpe:2.3:a:tcpdump:tcpdump:4.6.1
-
cpe:2.3:a:tcpdump:tcpdump:4.7.0
-
cpe:2.3:a:tcpdump:tcpdump:4.7.2
-
cpe:2.3:a:tcpdump:tcpdump:4.7.3
-
cpe:2.3:o:opensuse:leap:42.2
-
cpe:2.3:o:opensuse_project:leap:42.1