CVE-2015-2155

The force printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 89%
Affected Products (NVD)
VendorProductVersion
debiandebian_linux
7.0
debiandebian_linux
8.0
opensuseopensuse
13.1
opensuseopensuse
13.2
oraclesolaris
11.2
tcpdumptcpdump
𝑥
≤ 4.7.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
tcpdump
bookworm
4.99.3-1
fixed
bullseye
4.99.0-2+deb11u1
fixed
sid
4.99.5-1
fixed
trixie
4.99.5-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
tcpdump
lucid
ignored
precise
Fixed 4.2.1-1ubuntu2.2
released
trusty
Fixed 4.5.1-2ubuntu1.2
released
utopic
Fixed 4.6.2-1ubuntu1.2
released
vivid
not-affected
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libpcap1
suse enterprise sap 12 SP1
1.8.1-9.1
fixed
suse enterprise sap 12 SP2
1.8.1-9.1
fixed
suse enterprise server 12 SP1
1.8.1-9.1
fixed
suse enterprise server 12 SP2
1.8.1-9.1
fixed
tcpdump
suse enterprise sap 12 SP1
4.9.0-13.1
fixed
suse enterprise sap 12 SP2
4.9.0-13.1
fixed
suse enterprise server 12 SP1
4.9.0-13.1
fixed
suse enterprise server 12 SP2
4.9.0-13.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
tcpdump
RHEL 7
14:4.9.0-5.el7
fixed
References