CVE-2015-2153
tcpdump < 4.7.0 - Denial of Service via Crafted RPKI-RTR PDU Header Length
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2015-2153. PoCs published by Luke Arntson, arntsonl.
AI-analyzed exploit summary This exploit triggers an out-of-bounds write in tcpdump's RPKI-RTR PDU parser by sending a malformed packet with an overly large message length field, causing a denial of service. It crafts a raw TCP packet with a malicious RPKI error PDU payload to exploit CVE-2015-2153.
Description
The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via a crafted header length in an RPKI-RTR Protocol Data Unit (PDU).
Exploits (2)
This exploit triggers an out-of-bounds write in tcpdump's RPKI-RTR PDU parser by sending a malformed packet with an overly large message length field, causing a denial of service. It crafts a raw TCP packet with a malicious RPKI error PDU payload to exploit CVE-2015-2153.
This PoC exploits CVE-2015-2153, a DoS vulnerability in tcpdump's RPKI-RTR PDU parser. It crafts a malformed packet with an out-of-bounds message length to trigger a crash when tcpdump runs in verbose mode.