Integer underflow in the olsr_print function in tcpdump 3.9.6 through 4.6.2, when in verbose mode, allows remote attackers to cause a denial of service (crash) via a crafted length value in an OLSR frame.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8767
Reference (s):
- APPLE:APPLE-SA-2015-08-13-2
- URL: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html
- BID:71150
- URL: http://www.securityfocus.com/bid/71150
- BUGTRAQ:20141118 CVE-2014-8767 tcpdump denial of service in verbose mode using malformed OLSR payload