PT-2014-8723 · Tcpdump+2 · Tcpdump+2

Steffen Bauch · Published 2014-11-20 · Updated 2024-06-15 · CVE-2014-8768

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions tcpdump versions 4.5.0 through 4.6.2

Description The issue is related to multiple integer underflows in the geonet print function when tcpdump is in verbose mode. This allows remote attackers to cause a denial of service, resulting in a segmentation fault and crash, by sending a crafted length value in a Geonet frame.

Recommendations For versions 4.5.0 through 4.6.2, consider disabling the verbose mode as a temporary workaround until a patch is available. Restrict access to the geonet print function to minimize the risk of exploitation. Avoid using the verbose mode in the affected tcpdump versions until the issue is resolved.

Exploit

Fix

DoS

Integer Underflow

Weakness Enumeration

CWE-191

Related Identifiers

CVE-2014-8768

OPENSUSE-SU-2024:10396-1

SUSE-SU-2017:1110-1

USN-2433-1

Affected Products

Suse

Ubuntu

Tcpdump

References · 96

• 🔥 http://seclists.org/fulldisclosure/2014/Nov/48 · Exploit
• 🔥 http://exploit-db.com/exploits/35359 · Exploit
• 🔥 https://exploit-db.com/exploits/35359 · Exploit
• 🔥 http://packetstormsecurity.com/files/129156/tcpdump-4.6.2-Geonet-Denial-Of-Service.html · Exploit
• https://security-tracker.debian.org/tracker/CVE-2014-8768 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-9140 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-8768 · Security Note
• https://ubuntu.com/security/CVE-2014-8768 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2014-8768 · Security Note
• https://osv.dev/vulnerability/USN-2433-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2015-02/msg00062.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10396-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-8767 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9140 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-8768 · Vendor Advisory