Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

Vulnerability Intelligence

Customers

CVE-2014-8767 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceCVE-2014-8767

CVE-2014-8767

UNKNOWN

Integer underflow in the olsr_print function in tcpdump 3

Published Nov 20, 2014

Modified 1 years ago

Details

Integer underflow in the olsr_print function in tcpdump 3.9.6 through 4.6.2, when in verbose mode, allows remote attackers to cause a denial of service (crash) via a crafted length value in an OLSR frame.

References

WEB

http://advisories.mageia.org/MGASA-2014-0503.html

ADVISORY

http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html

ADVISORY

http://lists.opensuse.org/opensuse-updates/2015-02/msg00062.html

WEB

http://packetstormsecurity.com/files/129155/tcpdump-4.6.2-OSLR-Denial-Of-Service.html

WEB

http://seclists.org/fulldisclosure/2014/Nov/47

ADVISORY

http://www.debian.org/security/2014/dsa-3086

ADVISORY

http://www.mandriva.com/security/advisories?name=MDVSA-2014:240

ADVISORY

http://www.mandriva.com/security/advisories?name=MDVSA-2015:125

WEB

http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html

WEB

http://www.securityfocus.com/archive/1/534011/100/0/threaded

WEB

http://www.securityfocus.com/bid/71150

ADVISORY

http://www.ubuntu.com/usn/USN-2433-1

WEB

https://exchange.xforce.ibmcloud.com/vulnerabilities/98765

WEB

https://support.apple.com/kb/HT205031

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2014-8767

CVSS Analysis

CVSS v2.0

5.0

Exploitability

Access Vector

NetworkAV:N

Access Complexity

LowAC:L

Authentication

NoneAu:N

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

PartialA:P

5/AV:N/AC:L/Au:N/C:N/I:N/A:P

Ecosystems

Timeline

PublishedNov 20, 2014

ModifiedAug 6, 2024