PT-2014-8845 · Tcpdump+2 · Tcpdump+2

Publicado 2014-12-03 · Atualizado 2018-10-09 · CVE-2014-9140

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions tcpdump versions 4.6.2 and earlier

Description A buffer overflow issue exists in the ppp hdlc function, located in the print-ppp.c file, allowing remote attackers to cause a denial of service by crashing the system via a crafted PPP packet.

Recommendations For versions 4.6.2 and earlier, update to a version later than 4.6.2 to resolve the issue.

Exploit

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2014-9140

DLA-102-1

DSA-3086-1

MGASA-2014-0511

SUSE-RU-2015:0335-1

SUSE-SU-2015:0679-1

SUSE-SU-2015:0692-1

SUSE-SU-2015_0692-1

USN-2433-1

Produtos afetados

Suse

Ubuntu

Tcpdump

Referências · 42

• 🔥 https://github.com/the-tcpdump-group/tcpdump/commit/0f95d441e4b5d7512cc5c326c8668a120e048eda · Exploit
• https://ubuntu.com/security/CVE-2014-8767 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2015-2153 · Nota
• https://suse.com/security/cve/CVE-2015-2154 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-9140 · Nota de Segurança
• https://ubuntu.com/security/CVE-2014-8768 · Aviso do Fabricante
• https://osv.dev/vulnerability/MGASA-2014-0511 · Aviso do Fabricante
• https://bugzilla.suse.com/923142 · Nota
• https://bugzilla.suse.com/922222 · Nota
• http://advisories.mageia.org/MGASA-2014-0511.html · Nota
• https://ubuntu.com/security/CVE-2014-9140 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-9140 · Aviso do Fabricante
• http://securityfocus.com/bid/71468 · Nota
• http://debian.org/security/2014/dsa-3086 · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDVSA-2015:125 · Aviso do Fabricante