Red Hat Tcpdump vulnerabilities

6 CVEs affecting Red Hat Tcpdump, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-9140, published 2014-12-05.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-8768, published 2014-11-20. Medium severity, CVSS 5.0. EPSS: 19.8% chance of exploitation in the next 30 days. Multiple Integer underflows in the geonet_print function in tcpdump 4.5.0 through 4.6.2, when in verbose mode, allow remote attackers to cause a denial of service (segmentation fault and crash) via a…
• CVE-2014-9140, published 2014-12-05. Medium severity, CVSS 5.0. EPSS: 5.8% chance of exploitation in the next 30 days. Buffer overflow in the ppp_hdlc function in print-ppp.c in tcpdump 4.6.2 and earlier allows remote attackers to cause a denial of service (crash) cia a crafted PPP packet.
• CVE-2014-8769, published 2014-11-20. Medium severity, CVSS 6.4. EPSS: 5.5% chance of exploitation in the next 30 days. tcpdump 3.8 through 4.6.2 might allow remote attackers to obtain sensitive information from memory or cause a denial of service (packet loss or segmentation fault) via a crafted Ad hoc On-Demand…
• CVE-2014-8767, published 2014-11-20. Medium severity, CVSS 5.0. EPSS: 5.5% chance of exploitation in the next 30 days. Integer underflow in the olsr_print function in tcpdump 3.9.6 through 4.6.2, when in verbose mode, allows remote attackers to cause a denial of service (crash) via a crafted length value in an OLSR…
• CVE-2003-0989, published 2004-02-17. High severity, CVSS 7.5. EPSS: 5.3% chance of exploitation in the next 30 days. tcpdump before 3.8.1 allows remote attackers to cause a denial of service (infinite loop) via certain ISAKMP packets, a different vulnerability than CVE-2004-0057.
• CVE-2003-0194, published 2003-06-09. Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days. tcpdump does not properly drop privileges to the pcap user when starting up.