CVE-2018-16451 PUBLISHED

The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN.

EPSS 0.47% · 64.6th percentile

Risk Scores

EPSS Score
0.47%
64.6th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTStcpdump4.9.2-3, 4.9.2-2ubuntu1, 4.9.2-2build1
Ubuntu:Pro:14.04:LTStcpdump4.9.2-0ubuntu0.14.04.1, 0, 4.4.0-1ubuntu1
Ubuntu:16.04:LTStcpdump4.9.2-0ubuntu0.16.04.1, 4.9.0-1ubuntu1~ubuntu16.04.1, 4.7.4-1ubuntu1

Timeline

References

Open in Interactive Console →