Lucene search

K
cve[email protected]CVE-2014-8768
HistoryNov 20, 2014 - 5:50 p.m.

CVE-2014-8768

2014-11-2017:50:05
CWE-191
web.nvd.nist.gov
31
cve-2014-8768
tcpdump
geonet_print
integer underflows
denial of service
segmentation fault
nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

8.7 High

AI Score

Confidence

High

0.081 Low

EPSS

Percentile

94.3%

Multiple Integer underflows in the geonet_print function in tcpdump 4.5.0 through 4.6.2, when in verbose mode, allow remote attackers to cause a denial of service (segmentation fault and crash) via a crafted length value in a Geonet frame.

Affected configurations

NVD
Node
opensuseopensuseMatch13.1
OR
opensuseopensuseMatch13.2
Node
canonicalubuntu_linuxMatch10.04lts
OR
canonicalubuntu_linuxMatch12.04lts
OR
canonicalubuntu_linuxMatch14.04lts
OR
canonicalubuntu_linuxMatch14.10
Node
oraclesolarisMatch11.2
Node
redhattcpdumpMatch4.5.0
OR
redhattcpdumpMatch4.5.1
OR
redhattcpdumpMatch4.5.2
OR
redhattcpdumpMatch4.6.0
OR
redhattcpdumpMatch4.6.1
OR
redhattcpdumpMatch4.6.2
AND
opensuseopensuseMatch13.1
OR
opensuseopensuseMatch13.2

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

8.7 High

AI Score

Confidence

High

0.081 Low

EPSS

Percentile

94.3%