CVE-2024-2397

CVSS V2 None CVSS V3 None
Description
Due to a bug in packet data buffers management, the PPP printer in tcpdump can enter an infinite loop when reading a crafted DLT_PPP_SERIAL .pcap savefile. This problem does not affect any tcpdump release, but it affected the git master branch from 2023-06-05 to 2024-03-21.
Overview
  • CVE ID
  • CVE-2024-2397
  • Assigner
  • Tcpdump
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-04-12T13:22:01.636Z
  • Last Modified Date
  • 2024-04-12T13:22:01.636Z
Weakness Enumerations
CWE URL
CWE-835 http://cwe.mitre.org/data/definitions/835.html
References
Reference URL Reference Tags
https://github.com/the-tcpdump-group/tcpdump/commit/b9811ef5bb1b7d45a90e042f81f3aaf233c8bcb2 patch
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GEZRGR3QCW2ZNFIAWMZZOG4ZLFLFNG2M/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HUUI2MBVHFENXNBCHDQZP2RBBA2VD5HG/
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2024-2397
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2397
History
Created Old Value New Value Data Type Notes
2024-06-25 23:40:10 Added to TrackCVE