CVE-2014-8769

Description

tcpdump 3.8 through 4.6.2 might allow remote attackers to obtain sensitive information from memory or cause a denial of service (packet loss or segmentation fault) via a crafted Ad hoc On-Demand Distance Vector (AODV) packet, which triggers an out-of-bounds memory access.

Risk Information

Base Score
9.1
MODERATE
Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
EPSS Score
Exploitation Probability
3.059

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities are fixed in OS X Yosemite 10.10.5 UpdateMac
Multiple vulnerabilities are fixed in OS X Yosemite 10.10.5 Combo UpdateMac
tcpdump security update(DSA-3193-1) tcpdump_4.3.0-1+deb7u2_i386.debLinux
tcpdump security update(DSA-3193-1) tcpdump_4.3.0-1+deb7u2_amd64.debLinux
SUSE-SU-2017:1110-1(SUSE Linux Enterprise Desktop 12-SP1 ) libpcap-debugsource-1.8.1-9.1.x86_64.rpmLinux
SUSE-SU-2017:1110-1(SUSE Linux Enterprise Desktop 12-SP1 ) libpcap1-1.8.1-9.1.x86_64.rpmLinux
SUSE-SU-2017:1110-1(SUSE Linux Enterprise Desktop 12-SP1 ) libpcap1-32bit-1.8.1-9.1.x86_64.rpmLinux
SUSE-SU-2017:1110-1(SUSE Linux Enterprise Desktop 12-SP1 ) libpcap1-debuginfo-1.8.1-9.1.x86_64.rpmLinux
SUSE-SU-2017:1110-1(SUSE Linux Enterprise Desktop 12-SP1 ) libpcap1-debuginfo-32bit-1.8.1-9.1.x86_64.rpmLinux
SUSE-SU-2017:1110-1(SUSE Linux Enterprise Desktop 12-SP1 ) tcpdump-4.9.0-13.1.x86_64.rpmLinux
SUSE-SU-2017:1110-1(SUSE Linux Enterprise Desktop 12-SP1 ) tcpdump-debuginfo-4.9.0-13.1.x86_64.rpmLinux
SUSE-SU-2017:1110-1(SUSE Linux Enterprise Desktop 12-SP1 ) tcpdump-debugsource-4.9.0-13.1.x86_64.rpmLinux

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-600354OS X Yosemite 10.10.5 Update
PATCH-600458OS X Yosemite 10.10.5 Combo Update

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234