Is CVE-2015-2155 being actively exploited?

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 8%.

What products does CVE-2015-2155 affect?

Tracked products affected include Solaris. Check the version you run to see whether it is affected.

How do I fix CVE-2015-2155?

Apply the vendor fix promptly. Upgrade affected products to a fixed version.

CVE-2015-2155

Q: What is CVE-2015-2155?

CVE-2015-2155 is a high-severity software vulnerability with a CVSS score of 7.5. The force printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.

HIGH severity · CVSS 7.5

7.5CVSS HIGH

Summary

The force printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.

Impact & exploitability

Attack vectorNetwork

Attack complexityLow

Privileges required—

User interaction—

Confidentiality impact—

Integrity impact—

Availability impact—

Exploit probability (EPSS)8%

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products we track (1)

Solaris

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Additional information

NVD record
http://packetstormsecurity.com/files/130730/tcpdump-Denial-Of-Service-Code-Execution.htmlPatch
http://advisories.mageia.org/MGASA-2015-0114.htmlAdvisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153834.htmlAdvisory
http://lists.opensuse.org/opensuse-updates/2015-03/msg00084.htmlAdvisory
http://www.debian.org/security/2015/dsa-3193Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2015:125
http://www.mandriva.com/security/advisories?name=MDVSA-2015:182
http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.htmlAdvisory