NetSight
IP …
medium5.0Public exploit code

CVE-2014-8768

Multiple Integer underflows in the geonet_print function in tcpdump 4.5.0 through 4.6.2, when in verbose mode, allow remote attackers to cause a denial of serv…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Multiple Integer underflows in the geonet_print function in tcpdump 4.5.0 through 4.6.2, when in verbose mode, allow remote attackers to cause a denial of service (segmentation fault and crash) via a crafted length value in a Geonet frame.

Affected products

VendorProductAffected versions
OpensuseOpensuse
Versions 13.1, 13.2
CanonicalUbuntu Linux
Versions 10.04, 12.04, 14.04, 14.10
OracleSolaris
Version 11.2
RedhatTcpdump
Versions 4.5.0, 4.5.1, 4.5.2, 4.6.0, 4.6.1, 4.6.2

Weakness classification

CWE-191

References