CVE-2015-0261: Tcpdump

High severity, CVSS 7.5. EPSS: 6.8% chance of exploitation in the next 30 days.

Integer signedness error in the mobility_opt_print function in the IPv6 mobility printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) or possibly execute arbitrary code via a negative length value.

Affected products

  • Tcpdump Tcpdump: up to and including 4.7.0

Published 2015-03-24. Last modified 2026-06-17.