5

CVE-2014-8767

Exploit
Integer underflow in the olsr_print function in tcpdump 3.9.6 through 4.6.2, when in verbose mode, allows remote attackers to cause a denial of service (crash) via a crafted length value in an OLSR frame.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Redhat ≫ Tcpdump Version 3.9.6
   Opensuse ≫ Opensuse Version 13.1
   Opensuse ≫ Opensuse Version 13.2
Redhat ≫ Tcpdump Version 3.9.7
   Opensuse ≫ Opensuse Version 13.1
   Opensuse ≫ Opensuse Version 13.2
Redhat ≫ Tcpdump Version 3.9.8
   Opensuse ≫ Opensuse Version 13.1
   Opensuse ≫ Opensuse Version 13.2
Redhat ≫ Tcpdump Version 4.0.0
   Opensuse ≫ Opensuse Version 13.1
   Opensuse ≫ Opensuse Version 13.2
Redhat ≫ Tcpdump Version 4.1.0
   Opensuse ≫ Opensuse Version 13.1
   Opensuse ≫ Opensuse Version 13.2
Redhat ≫ Tcpdump Version 4.1.1
   Opensuse ≫ Opensuse Version 13.1
   Opensuse ≫ Opensuse Version 13.2
Redhat ≫ Tcpdump Version 4.1.2
   Opensuse ≫ Opensuse Version 13.1
   Opensuse ≫ Opensuse Version 13.2
Redhat ≫ Tcpdump Version 4.2.1
   Opensuse ≫ Opensuse Version 13.1
   Opensuse ≫ Opensuse Version 13.2
Redhat ≫ Tcpdump Version 4.3.0
   Opensuse ≫ Opensuse Version 13.1
   Opensuse ≫ Opensuse Version 13.2
Redhat ≫ Tcpdump Version 4.3.1
   Opensuse ≫ Opensuse Version 13.1
   Opensuse ≫ Opensuse Version 13.2
Redhat ≫ Tcpdump Version 4.4.0
   Opensuse ≫ Opensuse Version 13.1
   Opensuse ≫ Opensuse Version 13.2
Redhat ≫ Tcpdump Version 4.5.0
   Opensuse ≫ Opensuse Version 13.1
   Opensuse ≫ Opensuse Version 13.2
Redhat ≫ Tcpdump Version 4.5.1
   Opensuse ≫ Opensuse Version 13.1
   Opensuse ≫ Opensuse Version 13.2
Redhat ≫ Tcpdump Version 4.5.2
   Opensuse ≫ Opensuse Version 13.1
   Opensuse ≫ Opensuse Version 13.2
Redhat ≫ Tcpdump Version 4.6.0
   Opensuse ≫ Opensuse Version 13.1
   Opensuse ≫ Opensuse Version 13.2
Redhat ≫ Tcpdump Version 4.6.1
   Opensuse ≫ Opensuse Version 13.1
   Opensuse ≫ Opensuse Version 13.2
Redhat ≫ Tcpdump Version 4.6.2
   Opensuse ≫ Opensuse Version 13.1
   Opensuse ≫ Opensuse Version 13.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.47% 0.917
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html
https://support.apple.com/kb/HT205031
http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
http://advisories.mageia.org/MGASA-2014-0503.html
http://lists.opensuse.org/opensuse-updates/2015-02/msg00062.html
http://packetstormsecurity.com/files/129155/tcpdump-4.6.2-OSLR-Denial-Of-Service.html
Exploit
http://seclists.org/fulldisclosure/2014/Nov/47
Exploit
http://www.debian.org/security/2014/dsa-3086
http://www.mandriva.com/security/advisories?name=MDVSA-2014:240
http://www.mandriva.com/security/advisories?name=MDVSA-2015:125
http://www.securityfocus.com/archive/1/534011/100/0/threaded
http://www.securityfocus.com/bid/71150
Exploit
http://www.ubuntu.com/usn/USN-2433-1
https://exchange.xforce.ibmcloud.com/vulnerabilities/98765