Detections
Analytics
openSUSE Security Update : tcpdump (openSUSE-2015-146)
medium Nessus Plugin ID 81371
Language:
Synopsis
The remote openSUSE host is missing a security update.Description
tcpdump was updated to fix three security issues.These security issues were fixed :
- CVE-2014-8767: Integer underflow in the olsr_print function in tcpdump 3.9.6 through 4.6.2, when in verbose mode, allowed remote attackers to cause a denial of service (crash) via a crafted length value in an OLSR frame (bnc#905870 905871).
- CVE-2014-8769: tcpdump 3.8 through 4.6.2 might allowed remote attackers to obtain sensitive information from memory or cause a denial of service (packet loss or segmentation fault) via a crafted Ad hoc On-Demand Distance Vector (AODV) packet, which triggers an out-of-bounds memory access (bnc#905871 905872).
- CVE-2014-8768: Multiple Integer underflows in the geonet_print function in tcpdump 4.5.0 through 4.6.2, when in verbose mode, allowed remote attackers to cause a denial of service (segmentation fault and crash) via a crafted length value in a Geonet frame (bnc#905871).
Solution
Update the affected tcpdump packages.See Also
https://bugzilla.opensuse.org/show_bug.cgi?id=905870
Plugin Details
Severity: Medium
ID: 81371
File Name: openSUSE-2015-146.nasl
Version: 1.4
Type: local
Agent: unix
Family: SuSE Local Security Checks
Published: 2/16/2015
Updated: 1/19/2021
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.0
CVSS v2
Risk Factor: Medium
Base Score: 6.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:P
Vulnerability Information
CPE: p-cpe:/a:novell:opensuse:tcpdump, p-cpe:/a:novell:opensuse:tcpdump-debuginfo, p-cpe:/a:novell:opensuse:tcpdump-debugsource, cpe:/o:novell:opensuse:13.1, cpe:/o:novell:opensuse:13.2
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list
Patch Publication Date: 2/6/2015