CVE-2024-2397
published 2024-04-12CVE-2024-2397: Due to a bug in packet data buffers management, the PPP printer in tcpdump can enter an infinite loop when reading a crafted DLT_PPP_SERIAL .pcap savefile…
PriorityP423medium6.2CVSS 3.1
AVLACLPRNUINSUCNINAH
EPSS
0.29%
20.9th percentile
Due to a bug in packet data buffers management, the PPP printer in tcpdump can enter an infinite loop when reading a crafted DLT_PPP_SERIAL .pcap savefile. This problem does not affect any tcpdump release, but it affected the git master branch from 2023-06-05 to 2024-03-21.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | tcpdump | — | — |
| the_tcpdump_group | tcpdump | >= 0d4083e < b9811ef | b9811ef |
CVSS provenance
nvdv3.16.2MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
vendor_debian6.2LOW
vendor_redhat6.2MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-j3vc-4chv-32mw: Due to a bug in packet data buffers management, the PPP printer in tcpdump can enter an infinite loop when reading a crafted DLT_PPP_SERIAL
ghsa_unreviewed·2024-04-12
CVE-2024-2397 [MEDIUM] CWE-835 GHSA-j3vc-4chv-32mw: Due to a bug in packet data buffers management, the PPP printer in tcpdump can enter an infinite loop when reading a crafted DLT_PPP_SERIAL
Due to a bug in packet data buffers management, the PPP printer in tcpdump can enter an infinite loop when reading a crafted DLT_PPP_SERIAL .pcap savefile. This problem does not affect any tcpdump release, but it affected the git master branch from 2023-06-05 to 2024-03-21.
Red Hat
tcpdump: Crafted .pcap file may lead to Denial of Service
vendor_redhat·2024-04-12·CVSS 6.2
CVE-2024-2397 [MEDIUM] CWE-835 tcpdump: Crafted .pcap file may lead to Denial of Service
tcpdump: Crafted .pcap file may lead to Denial of Service
Due to a bug in packet data buffers management, the PPP printer in tcpdump can enter an infinite loop when reading a crafted DLT_PPP_SERIAL .pcap savefile. This problem does not affect any tcpdump release, but it affected the git master branch from 2023-06-05 to 2024-03-21.
A flaw was found in tcpdump. Trying to print content from a maliciously crafted .pcap file may lead to an infinite loop, resulting in a denial of service. This issue is considered low severity; for a successful attack to happen, a user must open a crafted file, and it will only crash a single user's execution of tcpdump.
Package: libpcap (Red Hat Enterprise Linux 10) - Not affected
Package: tcpdump (Red Hat Enterprise Linux 10) - Not affected
Package: libpca
Debian
CVE-2024-2397: tcpdump - Due to a bug in packet data buffers management, the PPP printer in tcpdump can e...
vendor_debian·2024·CVSS 6.2
CVE-2024-2397 [MEDIUM] CVE-2024-2397: tcpdump - Due to a bug in packet data buffers management, the PPP printer in tcpdump can e...
Due to a bug in packet data buffers management, the PPP printer in tcpdump can enter an infinite loop when reading a crafted DLT_PPP_SERIAL .pcap savefile. This problem does not affect any tcpdump release, but it affected the git master branch from 2023-06-05 to 2024-03-21.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved
sid: resolved
trixie: resolved
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/the-tcpdump-group/tcpdump/commit/b9811ef5bb1b7d45a90e042f81f3aaf233c8bcb2https://lists.fedoraproject.org/archives/list/[email protected]/message/GEZRGR3QCW2ZNFIAWMZZOG4ZLFLFNG2M/https://lists.fedoraproject.org/archives/list/[email protected]/message/HUUI2MBVHFENXNBCHDQZP2RBBA2VD5HG/https://github.com/the-tcpdump-group/tcpdump/commit/b9811ef5bb1b7d45a90e042f81f3aaf233c8bcb2https://lists.fedoraproject.org/archives/list/[email protected]/message/GEZRGR3QCW2ZNFIAWMZZOG4ZLFLFNG2M/https://lists.fedoraproject.org/archives/list/[email protected]/message/HUUI2MBVHFENXNBCHDQZP2RBBA2VD5HG/https://lists.freebsd.org/archives/freebsd-security/2024-September/000298.html
2024-04-12
Published