CVE-2024-2397: infinite loop in the PPP printer of tcpdump
Due to a bug in packet data buffers management, the PPP printer in tcpdump can enter an infinite loop when reading a crafted DLTPPPSERIAL .pcap savefile. This problem does not affect any tcpdump release, but it affected the git master branch from 2023-06-05 to 2024-03-21.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-2397?
CVE-2024-2397 is classified as a critical vulnerability due to the potential for denial of service from an infinite loop.
How does CVE-2024-2397 exploit work?
CVE-2024-2397 exploits a bug in the management of packet data buffers in the PPP printer of tcpdump, leading to an infinite loop when processing a crafted DLT_PPP_SERIAL .pcap file.
How do I fix CVE-2024-2397?
To mitigate CVE-2024-2397, ensure you are using a version of tcpdump that is not between June 5, 2023, and March 21, 2024.
Which versions of tcpdump are affected by CVE-2024-2397?
CVE-2024-2397 affects tcpdump versions between 2023-06-05 and 2024-03-21.
Is there a patch available for CVE-2024-2397?
Yes, later releases of tcpdump after March 21, 2024, address the vulnerability CVE-2024-2397.