Back to Database
Status published
Medium
CVE-2024-2397
infinite loop in the PPP printer of tcpdump
Vulnerability Description
Due to a bug in packet data buffers management, the PPP printer in tcpdump can enter an infinite loop when reading a crafted DLT_PPP_SERIAL .pcap savefile. This problem does not affect any tcpdump release, but it affected the git master branch from 2023-06-05 to 2024-03-21.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-2397
Credits & Attribution
No credits recorded in the NVD database.
References
- https://github.com/the-tcpdump-group/tcpdump/commit/b9811ef5bb1b7d45a90e042f81f3aaf233c8bcb2
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GEZRGR3QCW2ZNFIAWMZZOG4ZLFLFNG2M/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HUUI2MBVHFENXNBCHDQZP2RBBA2VD5HG/
More from The Tcpdump Group
View All →CVE-2025-11964
OOBW in utf_16le_to_utf_8_truncated() in libpcap
Low
1.9
CVE-2025-11961
OOBR and OOBW in pcap_ether_aton() in libpcap
Low
1.9
CVE-2024-8006
NULL pointer dereference in libpcap before 1.10.5 with remote packet capture support
Medium
4.4
CVE-2023-7256
Double-free in libpcap before 1.10.5 with remote packet capture support.
Medium
4.4
CVE-2023-1801
The SMB protocol decoder in tcpdump version 4.99.3 can perform...
Unknown
0
Affected Vendor
The Tcpdump Group
View all reports →Affected Software
tcpdump
Vulnerable Versions:
0d4083e
Timeline
Official Publish:
April 12th, 2024
Last Modified:
February 13th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H