CVE:CVE-2014-8768
CNNVD:CNNVD-201411-375
tcpdump是Tcpdump团队开发的一套运行在命令行下的嗅探工具。该工具主要用于数据包分析和网络流量捕获等。
tcpdump 4.5.0版本至4.6.2版本的‘geonet_print’函数中存在整数溢出漏洞。程序在verbose模式时，远程攻击者可借助Geonet框架中特制长度值利用该漏洞造成拒绝服务（分段错误和崩溃）。
solution:Upgrade opensuse opensuse to a higher version than 13.1,13.2,and avoid the version 13.1,13.2; Upgrade canonical ubuntu_linux to a higher version than 10.04,12.04,14.04,14.10,and avoid the version 10.04,12.04,14.04,14.10; Upgrade oracle solaris to a higher version than 11.2,and avoid the version 11.2; Upgrade redhat tcpdump to a higher version than 4.5.0,4.5.1,4.5.2,4.6.0,4.6.1,4.6.2,and avoid the version 4.5.0,4.5.1,4.5.2,4.6.0,4.6.1,4.6.2