CVE-2015-0261

Public on 2015-03-24

Modified on 2015-07-07

Description

Integer signedness error in the mobility_opt_print function in the IPv6 mobility printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) or possibly execute arbitrary code via a negative length value.

Severity

Medium

See what this means

CVSS v3 Base Score

6.8

See breakdown

Affected Packages

Platform	Package	Release Date	Advisory
Amazon Linux 1	tcpdump	2015-07-07	ALAS-2015-557

CVSS Scores

	Score Type	Score	Vector
Amazon Linux	CVSSv2	6.8	AV:N/AC:M/Au:N/C:P/I:P/A:P
NVD	CVSSv2	7.5	AV:N/AC:L/Au:N/C:P/I:P/A:P

References

FAQs regarding Amazon Linux ALAS/CVE Severity Red Hat: CVE-2015-0261 Mitre: CVE-2015-0261