CVE-2014-8767: redhat tcpdump Numeric Errors
Vulnerability summary
CVE-2014-8767 is a medium (CVSS 5.0) Numeric Errors vulnerability in redhat tcpdump. EPSS estimates a 5.47% chance of exploitation in the next 30 days, higher than 92.6% of scored vulnerabilities. 3 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 6 · Related 3Timeline
- 20-11-2014PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Integer underflow in the olsr_print function in tcpdump 3.9.6 through 4.6.2, when in verbose mode, allows remote attackers to cause a denial of service (crash) via a crafted length value in an OLSR frame.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
5.47%
Chance of exploitation in the next 30 days
Percentile
93%
Versus all other CVEs
30-day change
0.00 pp
From 5.47% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
3 foundExploit Reference (packetstormsecurity.com)
Maturity: unknown
Exploit Reference (seclists.org)
Maturity: unknown
Exploit Reference (securityfocus.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Debian1 product
- tcpdump< 4.6.2-2
Redhat1 product
- tcpdump3.9.6 | 3.9.7 | 3.9.8 | 4.0.0 | 4.1.0 | 4.1.1 | 4.1.2 | 4.2.1 | 4.3.0 | 4.3.1 | 4.4.0 | 4.5.0 | 4.5.1 | 4.5.2 | 4.6.0 | 4.6.1 | 4.6.2
Ubuntu1 product
- tcpdump< 4.5.1-2ubuntu1.1
3 vendors · 3 products
References
19 links- packetstormsecurity.com/files/129155/tcpdump-4.6.2-OSLR-Denial-Of-Service.htmlX Refsource MISCExploit
- www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.htmlX Refsource CONFIRM
Show all 19 references
- advisories.mageia.org/MGASA-2014-0503.htmlX Refsource CONFIRM
- support.apple.com/kb/HT205031X Refsource CONFIRM