Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-8768
HistoryNov 20, 2014 - 12:00 a.m.

CVE-2014-8768

2014-11-2000:00:00
ubuntu.com
ubuntu.com
14

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.073 Low

EPSS

Percentile

94.0%

Multiple Integer underflows in the geonet_print function in tcpdump 4.5.0
through 4.6.2, when in verbose mode, allow remote attackers to cause a
denial of service (segmentation fault and crash) via a crafted length value
in a Geonet frame.

Bugs

Notes

Author Note
mdeslaur introduced in 4.5.0
OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchtcpdump< 4.5.1-2ubuntu1.1UNKNOWN
ubuntu14.10noarchtcpdump< 4.6.2-1ubuntu1.1UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.073 Low

EPSS

Percentile

94.0%