tcpdump: CVE-2023-1801

Debian Bug report logs - #1034086
tcpdump: CVE-2023-1801

Reply or subscribe to this bug.

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: tcpdump: CVE-2023-1801

Date: Sat, 08 Apr 2023 13:46:53 +0200

Source: tcpdump
Version: 4.99.3-1
Severity: important
Tags: security upstream
X-Debbugs-Cc: carnil@debian.org, Debian Security Team <team@security.debian.org>

Hi,

The following vulnerability was published for tcpdump.

CVE-2023-1801[0]:
| The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-
| of-bounds write when decoding a crafted network packet.


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2023-1801
    https://www.cve.org/CVERecord?id=CVE-2023-1801
[1] https://github.com/the-tcpdump-group/tcpdump/commit/03c037bbd75588beba3ee09f26d17783d21e30bc

Regards,
Salvatore

Message #14 received at 1034086@bugs.debian.org (full text, mbox, reply):

From: Romain Francoise <rfrancoise@debian.org>

To: Salvatore Bonaccorso <carnil@debian.org>

Cc: 1034086@bugs.debian.org

Subject: Re: Bug#1034086: tcpdump: CVE-2023-1801

Date: Sat, 8 Apr 2023 21:49:05 +0200

Hi Salvatore,

On Sat, Apr 8, 2023 at 1:51 PM Salvatore Bonaccorso <carnil@debian.org> wrote:
> The following vulnerability was published for tcpdump.
>
> CVE-2023-1801[0]:
> | The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-
> | of-bounds write when decoding a crafted network packet.

Thanks. Just in case, I will mention that the SMB printer code is
*not* enabled in Debian anymore. None of the supported distributions
(oldstable, stable, testing/sid) are affected.

-- 
Romain Francoise <rfrancoise@debian.org>
https://people.debian.org/~rfrancoise/

Message #19 received at 1034086@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>

To: rfrancoise@debian.org, 1034086@bugs.debian.org

Subject: Re: Bug#1034086: tcpdump: CVE-2023-1801

Date: Sun, 9 Apr 2023 09:04:56 +0200

Hi Romain,

On Sat, Apr 08, 2023 at 09:49:05PM +0200, Romain Francoise wrote:
> Hi Salvatore,
> 
> On Sat, Apr 8, 2023 at 1:51 PM Salvatore Bonaccorso <carnil@debian.org> wrote:
> > The following vulnerability was published for tcpdump.
> >
> > CVE-2023-1801[0]:
> > | The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-
> > | of-bounds write when decoding a crafted network packet.
> 
> Thanks. Just in case, I will mention that the SMB printer code is
> *not* enabled in Debian anymore. None of the supported distributions
> (oldstable, stable, testing/sid) are affected.

Ah right, I see the binary packages are not affected by the respective
code path, so have marked this in the security-tracker accordingly as
unimportant.

Thanks,

Regards,
Salvatore

Send a report that this bug log contains spam.