CVE-2023-1801

Mô tả

Tham khảo

• the-tcpdump-group/tcpdump commit 03c037b · Patch
• the-tcpdump-group/tcpdump commit 7578e1c · Patch
• lists.fedoraproject.org/archives/list/[email protected]/message/KOA2BJFERAC3VRQIRHJOWN4HZY4ZA7CH
• lists.fedoraproject.org/archives/list/[email protected]/message/WYL5DEVHRJYF2CM5LTCZKEYFYDZAIZSN
• lists.fedoraproject.org/archives/list/[email protected]/message/ZLLZCG23MU6O4QOG2CX3DLEL3YXP6LAI
• support.apple.com/kb/HT213844
• support.apple.com/kb/HT213845

Lỗ hổng khác của tcpdump

• CVE-2019-15167NGHIÊM TRỌNG 9.1The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 3, a different vulnerability th…
• CVE-2020-8037CAO 7.5The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.
• CVE-2020-8036CAO 7.5The tok2strbuf() function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way.
• CVE-2019-15166CAO 7.5lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks.
• CVE-2018-16452CAO 7.5The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smb_fdata() via recursion.