Bug 14728 - tcpdump new security issue CVE-2014-9140
Summary: tcpdump new security issue CVE-2014-9140
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 4
Hardware: i586 Linux
Priority: Normal major
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL: http://lwn.net/Vulnerabilities/624613/
Whiteboard: MGA4-32-OK MGA4-64-OK advisory
Keywords: validated_update
Depends on:
Blocks:
 
Reported: 2014-12-04 17:55 CET by David Walser
Modified: 2014-12-05 16:54 CET (History)
3 users (show)

See Also:
Source RPM: tcpdump-4.4.0-2.1.mga4.src.rpm
CVE:
Status comment:


Attachments

Description David Walser 2014-12-04 17:55:53 CET
Debian and Ubuntu have issued advisories on December 3 and December 4:
https://www.debian.org/security/2014/dsa-3086
http://www.ubuntu.com/usn/usn-2433-1/

Patched packages uploaded for Mageia 4 and Cauldron.

I don't see a PoC for this one.

Advisory:
========================

Updated tcpdump packages fix security vulnerability:

It was discovered that tcpdump incorrectly handled printing PPP packets. A
remote attacker could use this issue to cause tcpdump to crash, resulting
in a denial of service, or possibly execute arbitrary code
(CVE-2014-9140).

References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9140
http://www.ubuntu.com/usn/usn-2433-1/
========================

Updated packages in core/updates_testing:
========================
tcpdump-4.4.0-2.2.mga4

from tcpdump-4.4.0-2.2.mga4.src.rpm

Reproducible: 

Steps to Reproduce:
Comment 1 William Kenney 2014-12-04 19:37:00 CET
In VirtualBox, M4, KDE, 32-bit

Package(s) under test:
tcpdump

default install of tcpdump

[root@localhost wilcal]# urpmi tcpdump
Package tcpdump-4.4.0-2.1.mga4.i586 is already installed

tcpdump, -help works, "-i any" displays a running log of tcp traffic
tcpdump -nnvvXS displays an extremely detailed running log of tcp traffic

install tcpdump from updates_testing

[root@localhost wilcal]# urpmi tcpdump
Package tcpdump-4.4.0-2.2.mga4.i586 is already installed

tcpdump, -help works, "-i any" displays a running log of tcp traffic
tcpdump -nnvvXS displays an extremely detailed running log of tcp traffic

Test platform:
Intel Core i7-2600K Sandy Bridge 3.4GHz
GIGABYTE GA-Z68X-UD3-B3 LGA 1155 MoBo
GIGABYTE GV-N440D3-1GI Nvidia GeForce GT 440 (Fermi) 1GB
RTL8111/8168B PCI Express 1Gbit Ethernet
DRAM 16GB (4 x 4GB)
Mageia 4 64-bit, Nvidia driver
virtualbox-4.3.10-1.1.mga4.x86_64
virtualbox-guest-additions-4.3.10-1.1.mga4.x86_64

CC: (none) => wilcal.int
Whiteboard: (none) => MGA4-32-OK

Comment 2 William Kenney 2014-12-04 19:53:58 CET
In VirtualBox, M4, KDE, 64-bit

Package(s) under test:
tcpdump

default install of tcpdump

[root@localhost wilcal]# urpmi tcpdump
Package tcpdump-4.4.0-2.1.mga4.x86_64 is already installed

tcpdump, -help works, "-i any" displays a running log of tcp traffic
tcpdump -nnvvXS displays an extremely detailed running log of tcp traffic

install tcpdump from updates_testing

[root@localhost wilcal]# urpmi tcpdump
Package tcpdump-4.4.0-2.2.mga4.x86_64 is already installed

tcpdump, -help works, "-i any" displays a running log of tcp traffic
tcpdump -nnvvXS displays an extremely detailed running log of tcp traffic

Test platform:
Intel Core i7-2600K Sandy Bridge 3.4GHz
GIGABYTE GA-Z68X-UD3-B3 LGA 1155 MoBo
GIGABYTE GV-N440D3-1GI Nvidia GeForce GT 440 (Fermi) 1GB
RTL8111/8168B PCI Express 1Gbit Ethernet
DRAM 16GB (4 x 4GB)
Mageia 4 64-bit, Nvidia driver
virtualbox-4.3.10-1.1.mga4.x86_64
virtualbox-guest-additions-4.3.10-1.1.mga4.x86_64
Comment 3 William Kenney 2014-12-04 19:54:49 CET
This update works fine.
Testing complete for mga4 32-bit & 64-bit
Validating the update.
Could someone from the sysadmin team push this to updates.
Thanks

Keywords: (none) => validated_update
Whiteboard: MGA4-32-OK => MGA4-32-OK MGA4-64-OK
CC: (none) => sysadmin-bugs

David Walser 2014-12-04 20:30:28 CET

URL: (none) => http://lwn.net/Vulnerabilities/624613/

Comment 4 Rémi Verschelde 2014-12-04 21:10:27 CET
Advisory uploaded.

CC: (none) => remi
Whiteboard: MGA4-32-OK MGA4-64-OK => MGA4-32-OK MGA4-64-OK advisory

Comment 5 Mageia Robot 2014-12-05 16:54:56 CET
An update for this issue has been pushed to Mageia Updates repository.

http://advisories.mageia.org/MGASA-2014-0511.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.