CVE-2014-9140

概要

参考情報

• advisories.mageia.org/MGASA-2014-0511.html
• lists.apple.com/archives/security-announce/2015/Aug/msg00001.html
• lists.opensuse.org/opensuse-updates/2015-03/msg00084.html
• packetstormsecurity.com/files/130730/tcpdump-Denial-Of-Service-Code-Execution.html
• seclists.org/tcpdump/2014/q4/72
• debian.org/security/2014/dsa-3086 · Vendor Advisory
• debian.org/security/2015/dsa-3193
• mandriva.com/security/advisories
• mandriva.com/security/advisories
• securityfocus.com/archive/1/534829/100/0/threaded
• securityfocus.com/bid/71468
• ubuntu.com/usn/USN-2433-1 · Patch
• the-tcpdump-group/tcpdump commit 0f95d44 · Exploit
• support.apple.com/kb/HT205031

tcpdump のその他の脆弱性

• CVE-2014-8769中 6.4tcpdump 3.8 through 4.6.2 might allow remote attackers to obtain sensitive information from memory or cause a denial of service (packet loss…
• CVE-2014-8768中 5.0Multiple Integer underflows in the geonet_print function in tcpdump 4.5.0 through 4.6.2, when in verbose mode, allow remote attackers to cau…
• CVE-2014-8767中 5.0Integer underflow in the olsr_print function in tcpdump 3.9.6 through 4.6.2, when in verbose mode, allows remote attackers to cause a denial…
• CVE-2003-0989高 7.5tcpdump before 3.8.1 allows remote attackers to cause a denial of service (infinite loop) via certain ISAKMP packets, a different vulnerabil…
• CVE-2003-0194中 4.6tcpdump does not properly drop privileges to the pcap user when starting up.