tcpdump CVE-2014-9140 Buffer Overflow Vulnerability
BID:71468
Info
tcpdump CVE-2014-9140 Buffer Overflow Vulnerability
| Bugtraq ID: | 71468 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2014-9140 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 18 2014 12:00AM |
| Updated: | Nov 03 2015 07:01PM |
| Credit: | Steffen Bauch |
| Vulnerable: |
Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: | |
Discussion
tcpdump CVE-2014-9140 Buffer Overflow Vulnerability
tcpdump is prone to a buffer-overflow vulnerability.
An attacker can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts may crash the application, denying service to legitimate users.
tcpdump is prone to a buffer-overflow vulnerability.
An attacker can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts may crash the application, denying service to legitimate users.
Exploit / POC
tcpdump CVE-2014-9140 Buffer Overflow Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
tcpdump CVE-2014-9140 Buffer Overflow Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.