Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 464
Alerts This Week
Warning Icon 1 464

Fedora 22: 2015-4804 Critical: Tcpdump DoS Security Fix

fedora
Calendar Grey March 31, 2015
Scroller Fedora
The latest update for tcpdump in Fedora 22 resolves significant vulnerabilities and improves the efficiency of network traffic analysis. Get it installed today.
Rebase to 4.7.3 (#1201573)

Summary

Tcpdump is a command-line tool for monitoring network traffic.

Tcpdump can capture and display the packet headers on a particular

network interface or on all interfaces. Tcpdump can display all of

the packet headers, or just the ones that match particular criteria.

Install tcpdump if you need a program to monitor network traffic.

Update Information:

Rebase to 4.7.3 (#1201573). Contains security fix for CVE-2015-0261, CVE-2015-2154, CVE-2015-2153, CVE-2015-2155.

Change Log

References


[ 1 ] Bug #1201792 - CVE-2015-0261 tcpdump: IPv6 mobility printer mobility_opt_print() typecastimg/signedness error https://bugzilla.redhat.com/show_bug.cgi?id=1201792 [ 2 ] Bug #1201795 - CVE-2015-2153 tcpdump: tcp printer rpki_rtr_pdu_print() missing length check https://bugzilla.redhat.com/show_bug.cgi?id=1201795 [ 3 ] Bug #1201797 - CVE-2015-2154 tcpdump: ethernet printer osi_print_cksum() missing sanity checks out-of-bounds read https://bugzilla.redhat.com/show_bug.cgi?id=1201797

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update tcpdump' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: tcpdump
Product: Fedora 22
Version: 4.7.3
Release: 1.fc22
Summary: A network traffic monitoring tool

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.