CVE-2018-16451 (NVD)

2019-10-03

The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN.

Products Mac_os_x, Debian_linux, Fedora, Leap, Enterprise_linux, Tcpdump
Type Out-of-bounds Read (CWE-125)
First patch - None (likely due to unavailable code)
Patches https://github.com/the-tcpdump-group/tcpdump/commit/96480ab95308cd9234b4f09b175ebf60e17792c6
Links • https://seclists.org/bugtraq/2019/Oct/28
• https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.9/CHANGES
• http://seclists.org/fulldisclosure/2019/Dec/26
• https://security.netapp.com/advisory/ntap-20200120-0001/
• https://seclists.org/bugtraq/2019/Dec/23