CVE-2014-8767

Published: Nov 20, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Integer underflow in the olsr_print function in tcpdump 3.9.6 through 4.6.2, when in verbose mode, allows remote attackers to cause a denial of service (crash) via a crafted length value in an OLSR frame.

Affected (17)

Products: Redhat: Tcpdump

1 product

Configuration A

17 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Redhat Tcpdump	Version 3.9.6
Redhat Tcpdump	Version 3.9.7
Redhat Tcpdump	Version 3.9.8
Redhat Tcpdump	Version 4.0.0
Redhat Tcpdump	Version 4.1.0
Redhat Tcpdump	Version 4.1.1
Redhat Tcpdump	Version 4.1.2
Redhat Tcpdump	Version 4.2.1
Redhat Tcpdump	Version 4.3.0
Redhat Tcpdump	Version 4.3.1
Redhat Tcpdump	Version 4.4.0
Redhat Tcpdump	Version 4.5.0
Redhat Tcpdump	Version 4.5.1
Redhat Tcpdump	Version 4.5.2
Redhat Tcpdump	Version 4.6.0
Redhat Tcpdump	Version 4.6.1
Redhat Tcpdump	Version 4.6.2

Running on/with	Platform Versions
Opensuse Opensuse	Version 13.1
Opensuse Opensuse	Version 13.2

Related CWEs

References (28)

http://advisories.mageia.org/MGASA-2014-0503.html

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2015-02/msg00062.html

Source: cve@mitre.org

http://packetstormsecurity.com/files/129155/tcpdump-4.6.2-OSLR-Denial-Of-Service.html

Source: cve@mitre.org

Exploit

http://seclists.org/fulldisclosure/2014/Nov/47

Source: cve@mitre.org

Exploit

http://www.debian.org/security/2014/dsa-3086

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2014:240

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2015:125

Source: cve@mitre.org

http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/534011/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/71150

Source: cve@mitre.org

Exploit

http://www.ubuntu.com/usn/USN-2433-1

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/98765

Source: cve@mitre.org

https://support.apple.com/kb/HT205031

Source: cve@mitre.org

http://advisories.mageia.org/MGASA-2014-0503.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2015-02/msg00062.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://packetstormsecurity.com/files/129155/tcpdump-4.6.2-OSLR-Denial-Of-Service.html

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://seclists.org/fulldisclosure/2014/Nov/47

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.debian.org/security/2014/dsa-3086

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2014:240

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2015:125

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/534011/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/71150

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.ubuntu.com/usn/USN-2433-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/98765

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/kb/HT205031

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.