#1034086 tcpdump: CVE-2023-1801

Package:
src:tcpdump
Source:
src:tcpdump
Submitter:
Salvatore Bonaccorso
Date:
2023-04-10 11:12:05 UTC
Severity:
normal
Tags:
#1034086#5
Date:
2023-04-08 11:46:53 UTC
From:
To:
Hi,

The following vulnerability was published for tcpdump.

CVE-2023-1801[0]:
| The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-
| of-bounds write when decoding a crafted network packet.


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2023-1801
https://www.cve.org/CVERecord?id=CVE-2023-1801
[1] https://github.com/the-tcpdump-group/tcpdump/commit/03c037bbd75588beba3ee09f26d17783d21e30bc

Regards,
Salvatore
#1034086#14
Date:
2023-04-08 19:49:05 UTC
From:
To:
Hi Salvatore,

Thanks. Just in case, I will mention that the SMB printer code is
*not* enabled in Debian anymore. None of the supported distributions
(oldstable, stable, testing/sid) are affected.
#1034086#19
Date:
2023-04-09 07:04:56 UTC
From:
To:
Hi Romain,

Ah right, I see the binary packages are not affected by the respective
code path, so have marked this in the security-tracker accordingly as
unimportant.

Thanks,

Regards,
Salvatore
#1034086#24
Date:
2023-04-10 10:17:18 UTC
From:
To:
Consequently I'm going to mark this bug as fixed in 4.9.3-1, which was
the first version to disable the SMB code in Debian (in 2019).
#1034086#35
Date:
2023-04-10 10:19:54 UTC
From:
To:
close 1034086 4.9.3-1
thanks