CVE-2014-8768
CVE-2014-8768 is a medium-severity vulnerability in Redhat Tcpdump with a CVSS 2.0 base score of 5.0. Its EPSS exploit-prediction score of 20% places it in the 97th percentile, indicating an elevated likelihood of exploitation. The underlying weakness is classified as CWE-191.
Key facts
- Severity: Medium (CVSS 2.0 base score 5.0)
- EPSS exploit prediction: 20% (97th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-191
- Affected product: Redhat Tcpdump
- Published:
- Last modified:
Description
Multiple Integer underflows in the geonet_print function in tcpdump 4.5.0 through 4.6.2, when in verbose mode, allow remote attackers to cause a denial of service (segmentation fault and crash) via a crafted length value in a Geonet frame.
Frequently asked questions
- What is CVE-2014-8768?
- Multiple Integer underflows in the geonet_print function in tcpdump 4.5.0 through 4.6.2, when in verbose mode, allow remote attackers to cause a denial of service (segmentation fault and crash) via a crafted length value in a Geonet frame.
- How severe is CVE-2014-8768?
- CVE-2014-8768 has a CVSS 2.0 base score of 5.0, rated medium severity.
- Is CVE-2014-8768 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 20% (97th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2014-8768?
- CVE-2014-8768 primarily affects Redhat Tcpdump. In total, 13 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2014-8768?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2014-8768 published?
- CVE-2014-8768 was published on 2014-11-20 and last updated on 2026-06-17.
References
- http://lists.opensuse.org/opensuse-updates/2015-02/msg00062.html
- http://packetstormsecurity.com/files/129156/tcpdump-4.6.2-Geonet-Denial-Of-Service.html
- http://seclists.org/fulldisclosure/2014/Nov/48
- http://www.exploit-db.com/exploits/35359
- http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
- http://www.securityfocus.com/archive/1/534010/100/0/threaded
- http://www.securityfocus.com/bid/71155
- http://www.ubuntu.com/usn/USN-2433-1
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98766
Affected products (13)
- cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
- cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*
- cpe:2.3:o:oracle:solaris:11.2:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:tcpdump:4.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:tcpdump:4.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:tcpdump:4.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:tcpdump:4.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:tcpdump:4.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:tcpdump:4.6.2:*:*:*:*:*:*:*
More vulnerabilities in Redhat Tcpdump
- CVE-2003-0989 — High (CVSS 7.5): tcpdump before 3.8.1 allows remote attackers to cause a denial of service (infinite loop) via certain ISAKMP packets, a…
- CVE-2014-8769 — Medium (CVSS 6.4): tcpdump 3.8 through 4.6.2 might allow remote attackers to obtain sensitive information from memory or cause a denial of…
- CVE-2014-9140 — Medium (CVSS 5.0): Buffer overflow in the ppp_hdlc function in print-ppp.c in tcpdump 4.6.2 and earlier allows remote attackers to cause a…
- CVE-2014-8767 — Medium (CVSS 5.0): Integer underflow in the olsr_print function in tcpdump 3.9.6 through 4.6.2, when in verbose mode, allows remote…
- CVE-2003-0194 — Medium (CVSS 4.6): tcpdump does not properly drop privileges to the pcap user when starting up.
All CVEs affecting Redhat Tcpdump →
Other CWE-191 (Integer Underflow) vulnerabilities
- CVE-2007-0063 — Critical (CVSS 10.0): Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build…
- CVE-2026-53176 — Critical (CVSS 9.8): In the Linux kernel, the following vulnerability has been resolved: IB/isert: Reject login PDUs shorter than…
- CVE-2026-37534 — Critical (CVSS 9.8): Integer underflow vulnerability in Open-SAE-J1939 thru commit b6caf884df46435e539b1ecbf92b6c29b345bdfe (2025-11-30) in…
- CVE-2025-52471 — Critical (CVSS 9.8): ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. An integer underflow vulnerability has been…
- CVE-2025-29909 — Critical (CVSS 9.8): CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures…
- CVE-2024-47606 — Critical (CVSS 9.8): GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in…