Out-of-Bounds Write Vulnerability in tcpdump's SMB Protocol Decoder

CVE-2023-1801

What is CVE-2023-1801?

The SMB protocol decoder in tcpdump version 4.99.3 is susceptible to an out-of-bounds write condition due to improper handling of crafted network packets. This vulnerability could allow an attacker to exploit the mismanagement of memory, potentially leading to arbitrary code execution or crashes. Users are urged to update their tcpdump installations to the latest patched version to mitigate any risks associated with this issue.

References