Bug 2185498 (CVE-2023-1801) - CVE-2023-1801 tcpdump: OOB write in SMB decoder
Summary: CVE-2023-1801 tcpdump: OOB write in SMB decoder
Keywords:
Status: NEW
Alias: CVE-2023-1801
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Nobody
QA Contact:
URL:
Whiteboard:
Depends On: 2185499 2185501 2185502
Blocks: 2185500
TreeView+ depends on / blocked
 
Reported: 2023-04-10 03:37 UTC by Avinash Hanwate
Modified: 2023-07-07 08:33 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description Avinash Hanwate 2023-04-10 03:37:13 UTC 
The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet.

https://github.com/the-tcpdump-group/tcpdump/commit/03c037bbd75588beba3ee09f26d17783d21e30bc
https://github.com/the-tcpdump-group/tcpdump/commit/7578e1c04ee280dda50c4c2813e7d55f539c6501
Comment 1 Avinash Hanwate 2023-04-10 03:37:32 UTC 
Created tcpdump tracking bugs for this issue:

Affects: fedora-all [bug 2185499]
Note You need to log in before you can comment on or make changes to this bug.