Skip to content

tcpdump CVE-2023-1801

Moderate
cbgbt published GHSA-797m-f6r9-4j2c May 12, 2023

Package

tcpdump (bottlerocket)

Affected versions

< 1.14.0

Patched versions

1.14.0

Description

The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet.

Severity

Moderate

CVE ID

CVE-2023-1801

Weaknesses

No CWEs