PT-2014-8723 · Tcpdump+2 · Tcpdump+2

Steffen Bauch · Publicado 2014-11-20 · Atualizado 2024-06-15 · CVE-2014-8768

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions tcpdump versions 4.5.0 through 4.6.2

Description The issue is related to multiple integer underflows in the geonet print function when tcpdump is in verbose mode. This allows remote attackers to cause a denial of service, resulting in a segmentation fault and crash, by sending a crafted length value in a Geonet frame.

Recommendations For versions 4.5.0 through 4.6.2, consider disabling the verbose mode as a temporary workaround until a patch is available. Restrict access to the geonet print function to minimize the risk of exploitation. Avoid using the verbose mode in the affected tcpdump versions until the issue is resolved.

Exploit

Correção

DoS

Integer Underflow

Enumeração de Fraquezas

CWE-191

Identificadores relacionados

CVE-2014-8768

OPENSUSE-SU-2024:10396-1

SUSE-SU-2017:1110-1

USN-2433-1

Produtos afetados

Suse

Ubuntu

Tcpdump

Referências · 96

• 🔥 http://seclists.org/fulldisclosure/2014/Nov/48 · Exploit
• 🔥 http://exploit-db.com/exploits/35359 · Exploit
• 🔥 https://exploit-db.com/exploits/35359 · Exploit
• 🔥 http://packetstormsecurity.com/files/129156/tcpdump-4.6.2-Geonet-Denial-Of-Service.html · Exploit
• https://github.com/the-tcpdump-group/tcpdump/commit/0f95d441e4b5d7512cc5c326c8668a120e048eda · Nota
• https://suse.com/security/cve/CVE-2016-7925 · Nota
• https://security-tracker.debian.org/tracker/CVE-2014-8768 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2017-5483 · Nota
• http://securityfocus.com/bid/71150 · Nota
• https://suse.com/security/cve/CVE-2016-7924 · Nota
• https://ubuntu.com/security/CVE-2014-9140 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-8768 · Nota de Segurança
• http://packetstormsecurity.com/files/129157/tcpdump-4.6.2-AOVD-Unreliable-Output.html · Nota
• https://suse.com/security/cve/CVE-2014-8769 · Nota
• https://suse.com/security/cve/CVE-2014-8768 · Nota