CVE-2014-9140: Buffer Overflow
Published Dec 5, 2014
·Updated
Buffer overflow in the ppphdlc function in print-ppp.c in tcpdump 4.6.2 and earlier allows remote attackers to cause a denial of service (crash) cia a crafted PPP packet.
Affected Software
1 affected component
redhat Tcpdump<=4.6.2
Remediation
Patch Available
Event History
Dec 5, 2014
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-9140?
CVE-2014-9140 is classified as a high severity vulnerability due to its potential to cause a denial of service.
2
How do I fix CVE-2014-9140?
To fix CVE-2014-9140, upgrade tcpdump to version 4.6.3 or later.
3
Who is affected by CVE-2014-9140?
CVE-2014-9140 affects tcpdump versions 4.6.2 and earlier, particularly in Red Hat distributions.
4
What is the impact of CVE-2014-9140?
The impact of CVE-2014-9140 is a denial of service that can crash the tcpdump application when processing a crafted PPP packet.
5
Is CVE-2014-9140 exploitable remotely?
Yes, CVE-2014-9140 is remotely exploitable, allowing attackers to send specially crafted PPP packets to trigger the vulnerability.