CVE-2014-8768

Name	CVE-2014-8768
Description	Multiple Integer underflows in the geonet_print function in tcpdump 4.5.0 through 4.6.2, when in verbose mode, allow remote attackers to cause a denial of service (segmentation fault and crash) via a crafted length value in a Geonet frame.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	770415

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
tcpdump (PTS)	bullseye	4.99.0-2+deb11u1	fixed
	bookworm	4.99.3-1	fixed
	forky, sid, trixie	4.99.5-2	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Debian Bugs
tcpdump	source	squeeze	(not affected)
tcpdump	source	wheezy	(not affected)
tcpdump	source	(unstable)	4.6.2-2	770415

Notes

[wheezy] - tcpdump <not-affected> (Vulnerable code added in 4.5.0)
[squeeze] - tcpdump <not-affected> (Vulnerable code added in 4.5.0)
http://www.securityfocus.com/archive/1/534010/30/0/threaded