CVE Vulnerabilities

CVE-2014-8767

Published: Nov 20, 2014 | Modified: Oct 30, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
2.9 LOW
AV:A/AC:M/Au:N/C:N/I:N/A:P
RedHat/V3
Ubuntu
LOW

Integer underflow in the olsr_print function in tcpdump 3.9.6 through 4.6.2, when in verbose mode, allows remote attackers to cause a denial of service (crash) via a crafted length value in an OLSR frame.

Affected Software

Name Vendor Start Version End Version
Tcpdump Redhat 3.9.6 (including) 3.9.6 (including)
Tcpdump Redhat 3.9.7 (including) 3.9.7 (including)
Tcpdump Redhat 3.9.8 (including) 3.9.8 (including)
Tcpdump Redhat 4.0.0 (including) 4.0.0 (including)
Tcpdump Redhat 4.1.0 (including) 4.1.0 (including)
Tcpdump Redhat 4.1.1 (including) 4.1.1 (including)
Tcpdump Redhat 4.1.2 (including) 4.1.2 (including)
Tcpdump Redhat 4.2.1 (including) 4.2.1 (including)
Tcpdump Redhat 4.3.0 (including) 4.3.0 (including)
Tcpdump Redhat 4.3.1 (including) 4.3.1 (including)
Tcpdump Redhat 4.4.0 (including) 4.4.0 (including)
Tcpdump Redhat 4.5.0 (including) 4.5.0 (including)
Tcpdump Redhat 4.5.1 (including) 4.5.1 (including)
Tcpdump Redhat 4.5.2 (including) 4.5.2 (including)
Tcpdump Redhat 4.6.0 (including) 4.6.0 (including)
Tcpdump Redhat 4.6.1 (including) 4.6.1 (including)
Tcpdump Redhat 4.6.2 (including) 4.6.2 (including)
Tcpdump Ubuntu lucid *
Tcpdump Ubuntu precise *
Tcpdump Ubuntu trusty *
Tcpdump Ubuntu upstream *
Tcpdump Ubuntu utopic *

References