Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2023-1801

Опубликовано: 07 апр. 2023
Источник: debian
EPSS Низкий

Описание

The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
tcpdumpfixed4.99.4-1experimentalpackage
tcpdumpfixed4.99.4-2package

Примечания

  • https://github.com/the-tcpdump-group/tcpdump/commit/7578e1c04ee280dda50c4c2813e7d55f539c6501 (master)

  • https://github.com/the-tcpdump-group/tcpdump/commit/03c037bbd75588beba3ee09f26d17783d21e30bc (tcpdump-4.99.4)

  • SMB printer not enabled in Debian builds

EPSS

Процентиль: 22%
0.00073
Низкий

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 3 года назад

The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet.

CVSS3: 6.5
redhat
почти 3 года назад

The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet.

CVSS3: 6.5
nvd
почти 3 года назад

The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet.

CVSS3: 9.8
github
почти 3 года назад

The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet.

EPSS

Процентиль: 22%
0.00073
Низкий