tcpdump

• Author: kikadf
• Vulnerable: 4.4.0-1
• Unaffected: 4.4.0-2arcturus1

Tcpdump program crash was reported when processing a malformed OLSR payload. The application decoder for the Ad hoc On-Demand Distance Vector (AODV) protocol fails to perform input validation and performs unsafe out-of-bound accesses.

CVEs:

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8767
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8769