CVE-2015-2153

CVE-2015-2153 describes an out-of-bounds read or write vulnerability in the rpki_rtr_pdu_print function of tcpdump versions prior to 4.7.2. This flaw allows remote attackers to trigger a denial of service (crash) by sending a specially crafted RPKI-RTR Protocol Data Unit (PDU) with a malicious header length. The vulnerability has a CVSS score of 5.0, indicating a medium severity, with low attack complexity and no authentication required, leading to potential availability impact. While not listed on the KEV catalog or Hot List, an exploit demonstrating a denial of service is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.