Description
The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via a crafted header length in an RPKI-RTR Protocol Data Unit (PDU).
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | tcpdump | 4.6.2-4 | — |
| Debian 13 | tcpdump | 4.6.2-4 | — |
| Debian 12 | tcpdump | 4.6.2-4 | — |
| Debian 7 | tcpdump | 4.3.0-1+deb7u2 | DSA-3193-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | tcpdump | 4.5.1-2ubuntu1.2 | USN-2580-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | tcpdump | 14:4.9.0-5.el7 | RHSA-2017:1871 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP2 | libpcap | 1.8.1-9.1 | SUSE-SU-2017:1110-1 |
| SLES 12 SP2 | tcpdump | 4.9.0-13.1 | SUSE-SU-2017:1110-1 |
| SLES 12 SP1 | libpcap | 1.8.1-9.1 | SUSE-SU-2017:1110-1 |
| SLES 12 SP1 | tcpdump | 4.9.0-13.1 | SUSE-SU-2017:1110-1 |
| SLES 12 | tcpdump | 4.5.1-7.1 | SUSE-SU-2015:0679-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP2 | libpcap | 1.8.1-9.1 | SUSE-SU-2017:1110-1 |
| SLES for SAP 12 SP2 | tcpdump | 4.9.0-13.1 | SUSE-SU-2017:1110-1 |
| SLES for SAP 12 SP1 | libpcap | 1.8.1-9.1 | SUSE-SU-2017:1110-1 |
| SLES for SAP 12 SP1 | tcpdump | 4.9.0-13.1 | SUSE-SU-2017:1110-1 |
| SLES for SAP 12 | tcpdump | 4.5.1-7.1 | SUSE-SU-2015:0679-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | tcpdump | 4.7.4-3.4 | openSUSE-SU-2024:10396-1 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | tcpdump | 14:4.9.0-5.el7 | ELSA-2017-1871 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- TcpDump - rpki_rtr_pdu_print Out-of-Bounds Denial of Service EDB-37663 · dos · Jul 20, 2015
GitHub 1 repository
-
arntsonl/CVE-2015-2153 ★ 2 · Aug 27, 2015
An implementation of the CVE-2015-2153 exploit.
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 7
- RHSA-2017:1871 Red Hat Security Advisory: tcpdump security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-3193-1 tcpdump - security update Debian Security (DSA / DLA) · Mar 9, 2026
- USN-2580-1 tcpdump vulnerabilities Ubuntu Security Notices (USN) · Feb 10, 2026
- SUSE-SU-2017:1110-1 Security update for tcpdump, libpcap SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2015:0679-1 Security update for tcpdump SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10396-1 tcpdump-4.7.4-3.4 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- ELSA-2017-1871 Moderate: tcpdump security, bug fix, and enhancement update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Aug 7, 2017
References
- FEDORA-2015-4939 vendor-advisory
- MDVSA-2015:125 vendor-advisory
- http://packetstormsecurity.com/files/130730/tcpdump-Denial-Of-Service-Code-Execution.html
- 73018 vdb-entry
- RHSA-2017:1871 vendor-advisory
- http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
- 1031937 vdb-entry
- GLSA-201510-04 vendor-advisory
- 37663 exploit
- FEDORA-2015-4804 vendor-advisory
- http://advisories.mageia.org/MGASA-2015-0114.html
- USN-2580-1 vendor-advisory
- 20150309 tcpdump 4.7.2 remote crashes mailing-list
- openSUSE-SU-2015:0616 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1201795
- MDVSA-2015:182 vendor-advisory
- DSA-3193 vendor-advisory