CVE-2023-1801
Assigner: Tcpdump
Published: 2023-04-07T20:40:55.540Z
State: PUBLISHED
descriptions: value: The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet.
affected: vendor: The Tcpdump Group
product: tcpdump
programRoutines: smb_fdata1()
versions: version: 4.99.3
status: affected
defaultStatus: unaffected
problemTypes: descriptions: description: out-of-bounds write
type: CWE
cweId: CWE-787
configurations: value: This vulnerability applies only to tcpdump binaries that were compiled with the SMB printer explicitly enabled. The SMB printer compilation is disabled by default.
workarounds: value: Do not enable the SMB printer when building tcpdump 4.99.3.
solutions: value: If using tcpdump 4.99.3, upgrade to 4.99.4.