CVE-2014-8768

Name of the Vulnerable Software and Affected Versions tcpdump versions 4.5.0 through 4.6.2

Description The issue is related to multiple integer underflows in the geonet print function when tcpdump is in verbose mode. This allows remote attackers to cause a denial of service, resulting in a segmentation fault and crash, by sending a crafted length value in a Geonet frame.

Recommendations For versions 4.5.0 through 4.6.2, consider disabling the verbose mode as a temporary workaround until a patch is available. Restrict access to the geonet print function to minimize the risk of exploitation. Avoid using the verbose mode in the affected tcpdump versions until the issue is resolved.