Out-of-bounds read in Tcpdump - CVE-2018-10103

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU21982

Out-of-bounds read in Tcpdump - CVE-2018-10103

Published: October 21, 2019


Vulnerability identifier: #VU21982
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-10103
CWE-ID: CWE-125
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary condition when printing SMB data. A remote attacker can generate specially crafted SMB traffic, trigger out-of-bounds read error and perform denial of service attack.


Affected software

Tcpdump
IBM VIOS
OpenShift Data Foundation (formerly OpenShift Container Storage)
tcpdump (Debian package)
tcpdump (Alpine package)
tcpdump (Red Hat package)
tcpdump
IBM AIX
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Anolis OS
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux Server - TUS
Oracle Solaris
Slackware Linux
Opensuse
Fedora

How to mitigate CVE-2018-10103

Install updates from vendor's website.

Tcpdump - update to 4.9.3
tcpdump (Debian package) - addressed in versions 4.9.3-1~deb9u1, 4.9.3-1~deb10u1
tcpdump (Alpine package) - update to 4.9.3-r0
tcpdump (Red Hat package) - addressed in versions 4.9.2-7.el8_2, 4.9.3-1.el8
tcpdump - update to 4.9.2-7
tcpdump - addressed in versions 4.9.3-1.fc29, 4.9.3-1.fc30, 4.9.3-1.fc31

External References

Related Security Bulletins