Skip to content
OpenAdvisories
Unscored USN-2580-1 4 CVEs

tcpdump vulnerabilities

Published Apr 27, 2015 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that tcpdump incorrectly handled printing certain
packets. A remote attacker could use this issue to cause tcpdump to crash,
resulting in a denial of service, or possibly execute arbitrary code.

In the default installation, attackers would be isolated by the tcpdump
AppArmor profile.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS tcpdump 4.5.1-2ubuntu1.2

Vulnerabilities 4

  • Unscored —
    CVE-2015-0261

    Integer signedness error in the mobility_opt_print function in the IPv6 mobility printer in tcpdump before 4.7.2 allows…

    tcpdump tcpdump Debian Ubuntu
  • Unscored —
    CVE-2015-2153 Public exploit EPSS 18%

    The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers …

    tcpdump tcpdump Debian Ubuntu
  • Unscored —
    CVE-2015-2154

    The osi_print_cksum function in print-isoclns.c in the ethernet printer in tcpdump before 4.7.2 allows remote attackers…

    tcpdump tcpdump Debian Ubuntu
  • Unscored —
    CVE-2015-2155

    The force printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (crash) and possibly exe…

    tcpdump tcpdump Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2015-0261
  • report
    https://ubuntu.com/security/CVE-2015-2153
  • report
    https://ubuntu.com/security/CVE-2015-2154
  • report
    https://ubuntu.com/security/CVE-2015-2155