CVE-2014-8769

tcpdump 4.6.2 AOVD Unreliable Output

Severity Score

6.4

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

tcpdump 3.8 through 4.6.2 might allow remote attackers to obtain sensitive information from memory or cause a denial of service (packet loss or segmentation fault) via a crafted Ad hoc On-Demand Distance Vector (AODV) packet, which triggers an out-of-bounds memory access.

tcpdump 3.8 hasta 4.6.2 podría permitir a atacantes remotos obtener información sensible de la memoria o causar una denegación de servicio ( paquetes perdidos o fallo de segmentación) a través de un paquete manipulado Ad hoc On-Demand Distance (AODV), que desencadena un acceso a memoria fuera de rango.

It was found out that malformed network traffic (AOVD-based) can lead to an abnormal behavior if verbose output of tcpdump monitoring the network is used. Affected versions are 3.8 through 4.6.2.

*Credits: N/A

CVSS Scores

NISTv2 6.4

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2014-11-13 CVE Reserved
2014-11-19 CVE Published
2024-07-02 EPSS Updated
2024-08-06 CVE Updated
2024-08-06 First Exploit
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CAPEC

References (14)

URL	Tag	Source
http://advisories.mageia.org/MGASA-2014-0503.html	X_refsource_confirm
http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html	X_refsource_confirm
http://www.securityfocus.com/archive/1/534009/100/0/threaded	Mailing List
https://exchange.xforce.ibmcloud.com/vulnerabilities/98764	Vdb Entry
https://support.apple.com/kb/HT205031	X_refsource_confirm

URL	Date	SRC
http://packetstormsecurity.com/files/129157/tcpdump-4.6.2-AOVD-Unreliable-Output.html	2024-08-06
http://seclists.org/fulldisclosure/2014/Nov/49	2024-08-06
http://www.securityfocus.com/bid/71153	2024-08-06

URL	Date	SRC

URL	Date	SRC
http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html	2018-10-09
http://lists.opensuse.org/opensuse-updates/2015-02/msg00062.html	2018-10-09
http://www.debian.org/security/2014/dsa-3086	2018-10-09
http://www.mandriva.com/security/advisories?name=MDVSA-2014:240	2018-10-09
http://www.mandriva.com/security/advisories?name=MDVSA-2015:125	2018-10-09
http://www.ubuntu.com/usn/USN-2433-1	2018-10-09

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Redhat Search vendor "Redhat"		Tcpdump Search vendor "Redhat" for product "Tcpdump"				3.8.0 Search vendor "Redhat" for product "Tcpdump" and version "3.8.0"		-		Affected
Redhat Search vendor "Redhat"		Tcpdump Search vendor "Redhat" for product "Tcpdump"				3.8.2 Search vendor "Redhat" for product "Tcpdump" and version "3.8.2"		-		Affected
Redhat Search vendor "Redhat"		Tcpdump Search vendor "Redhat" for product "Tcpdump"				3.9.2 Search vendor "Redhat" for product "Tcpdump" and version "3.9.2"		-		Affected
Redhat Search vendor "Redhat"		Tcpdump Search vendor "Redhat" for product "Tcpdump"				3.9.3 Search vendor "Redhat" for product "Tcpdump" and version "3.9.3"		-		Affected
Redhat Search vendor "Redhat"		Tcpdump Search vendor "Redhat" for product "Tcpdump"				3.9.4 Search vendor "Redhat" for product "Tcpdump" and version "3.9.4"		-		Affected
Redhat Search vendor "Redhat"		Tcpdump Search vendor "Redhat" for product "Tcpdump"				3.9.5 Search vendor "Redhat" for product "Tcpdump" and version "3.9.5"		-		Affected
Redhat Search vendor "Redhat"		Tcpdump Search vendor "Redhat" for product "Tcpdump"				3.9.6 Search vendor "Redhat" for product "Tcpdump" and version "3.9.6"		-		Affected
Redhat Search vendor "Redhat"		Tcpdump Search vendor "Redhat" for product "Tcpdump"				3.9.7 Search vendor "Redhat" for product "Tcpdump" and version "3.9.7"		-		Affected
Redhat Search vendor "Redhat"		Tcpdump Search vendor "Redhat" for product "Tcpdump"				3.9.8 Search vendor "Redhat" for product "Tcpdump" and version "3.9.8"		-		Affected
Redhat Search vendor "Redhat"		Tcpdump Search vendor "Redhat" for product "Tcpdump"				4.0.0 Search vendor "Redhat" for product "Tcpdump" and version "4.0.0"		-		Affected
Redhat Search vendor "Redhat"		Tcpdump Search vendor "Redhat" for product "Tcpdump"				4.1.0 Search vendor "Redhat" for product "Tcpdump" and version "4.1.0"		-		Affected
Redhat Search vendor "Redhat"		Tcpdump Search vendor "Redhat" for product "Tcpdump"				4.1.1 Search vendor "Redhat" for product "Tcpdump" and version "4.1.1"		-		Affected
Redhat Search vendor "Redhat"		Tcpdump Search vendor "Redhat" for product "Tcpdump"				4.1.2 Search vendor "Redhat" for product "Tcpdump" and version "4.1.2"		-		Affected
Redhat Search vendor "Redhat"		Tcpdump Search vendor "Redhat" for product "Tcpdump"				4.2.1 Search vendor "Redhat" for product "Tcpdump" and version "4.2.1"		-		Affected
Redhat Search vendor "Redhat"		Tcpdump Search vendor "Redhat" for product "Tcpdump"				4.3.0 Search vendor "Redhat" for product "Tcpdump" and version "4.3.0"		-		Affected
Redhat Search vendor "Redhat"		Tcpdump Search vendor "Redhat" for product "Tcpdump"				4.3.1 Search vendor "Redhat" for product "Tcpdump" and version "4.3.1"		-		Affected
Redhat Search vendor "Redhat"		Tcpdump Search vendor "Redhat" for product "Tcpdump"				4.4.0 Search vendor "Redhat" for product "Tcpdump" and version "4.4.0"		-		Affected
Redhat Search vendor "Redhat"		Tcpdump Search vendor "Redhat" for product "Tcpdump"				4.5.0 Search vendor "Redhat" for product "Tcpdump" and version "4.5.0"		-		Affected
Redhat Search vendor "Redhat"		Tcpdump Search vendor "Redhat" for product "Tcpdump"				4.5.1 Search vendor "Redhat" for product "Tcpdump" and version "4.5.1"		-		Affected
Redhat Search vendor "Redhat"		Tcpdump Search vendor "Redhat" for product "Tcpdump"				4.5.2 Search vendor "Redhat" for product "Tcpdump" and version "4.5.2"		-		Affected
Redhat Search vendor "Redhat"		Tcpdump Search vendor "Redhat" for product "Tcpdump"				4.6.0 Search vendor "Redhat" for product "Tcpdump" and version "4.6.0"		-		Affected
Redhat Search vendor "Redhat"		Tcpdump Search vendor "Redhat" for product "Tcpdump"				4.6.1 Search vendor "Redhat" for product "Tcpdump" and version "4.6.1"		-		Affected
Redhat Search vendor "Redhat"		Tcpdump Search vendor "Redhat" for product "Tcpdump"				4.6.2 Search vendor "Redhat" for product "Tcpdump" and version "4.6.2"		-		Affected