PT-2014-8845 · Tcpdump+2 · Tcpdump+2

Published 2014-12-03 · Updated 2018-10-09 · CVE-2014-9140

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions tcpdump versions 4.6.2 and earlier

Description A buffer overflow issue exists in the ppp hdlc function, located in the print-ppp.c file, allowing remote attackers to cause a denial of service by crashing the system via a crafted PPP packet.

Recommendations For versions 4.6.2 and earlier, update to a version later than 4.6.2 to resolve the issue.

Exploit

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2014-9140

DLA-102-1

DSA-3086-1

MGASA-2014-0511

SUSE-RU-2015:0335-1

SUSE-SU-2015:0679-1

SUSE-SU-2015:0692-1

SUSE-SU-2015_0692-1

USN-2433-1

Affected Products

Suse

Ubuntu

Tcpdump

References · 42

• 🔥 https://github.com/the-tcpdump-group/tcpdump/commit/0f95d441e4b5d7512cc5c326c8668a120e048eda · Exploit
• https://ubuntu.com/security/CVE-2014-8767 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-9140 · Security Note
• https://ubuntu.com/security/CVE-2014-8768 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2014-0511 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-9140 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-9140 · Vendor Advisory
• http://debian.org/security/2014/dsa-3086 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2015:125 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2014-0511.html · Security Note
• http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html · Vendor Advisory
• http://debian.org/security/2015/dsa-3193 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2014-9140 · Security Note
• https://ubuntu.com/security/CVE-2014-8769 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2433-1 · Vendor Advisory